Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6406Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6400Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6398Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 moreImproper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs...CVE-2019-156244.9 Medium
- hackerone nextcloud server, nextcloud server, opensuse backports sle +1 more +3 moreExposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain...CVE-2019-156235.3 Medium
- suse openstack cloud, openstack cloud crowbar, openstack cloud 7 +4 more +6 morecrowbar provision leaks admin password to all nodes in cleartextCVE-2018-179549.3 Critical
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...CVE-2006-7246Fix available6.8 Medium
- suse studio onsite, susestudio-ui-server +1 moreSQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsiteCVE-2017-148078.1 High
- suse studio onsite, susestudio-ui-server +1 moreInsecure handling of repodata and packages in SUSE Studio onliteCVE-2017-148063.7 Low
- suse yast2-security, opensuse factory +1 moreyast: Fallback to DES without configuration in /etc/login.defCVE-2019-3700Fix available2.9 Low
- opensuse factory, leap 15.1, munin +2 moreLocal privilege escalation from munin to root in the packaging of muninCVE-2019-36947.7 High
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of innCVE-2019-3692Fix available7.7 High
- suse linux enterprise server"easy" permission profile allows everyone execute dumpcap and read all network trafficCVE-2019-36874.0 Medium
- suse openqaXSS in distri and version parameter in openQACVE-2019-36866.5 Medium
- suse keystone-json-assignment, openstack cloud, openstack cloud 8 +1 more +3 morekeystone_json_assignment backend granted access to any project for users in user-project-map.jsonCVE-2019-36838.8 High
- suse caas platform, caas platform 3.0 +1 moreInsecure API port exposed to all Master Node guest containersCVE-2019-36828.4 High
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- opensuse libzypp, suse caas platform 3.0, linux enterprise server 12 +1 more +3 morelibzypp stores cookies world readableCVE-2019-18900Fix available4.0 Medium
- phpmyadmin, debian linux, suse linux enterprise server +2 morephpMyAdmin SQL injection in user accounts pageCVE-2020-5504Public exploitFix availableEPSS 28.0%8.8 High
- obs-server, suse linux enterprise server +1 moreobs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api...CVE-2010-37828.8 High
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13764Public exploitFix available8.8 High
- Show moreLoading…