Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 moreThe Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send...CVE-2002-20001Public exploitFix availableEPSS 24.6%7.5 High
- opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 moreclone-master-clean-up: dangerous file system operationsCVE-2021-32000Fix available3.2 Low
- suse rancher, rancher k3s, rancher rke2 +2 moreK3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a tokenCVE-2021-32001Fix available6.5 Medium
- rancher, rancher suse linux enterprise server 15, suse linux enterprise server 15 +2 moreRancher: Privilege escalation vulnerability via malicious Connection headerCVE-2021-31999Fix available8.8 High
- rancherRancher: Cloud credentials can be used through proxy API by users without accessCVE-2021-25320Fix available9.9 Critical
- rancherrancher: API group not properly specified when creating Kubernetes RBAC resourcesCVE-2021-25318Fix available8.8 High
- opensuse factory, leap 15.2, suse arpwatch +3 more +5 morearpwatch: Local privilege escalation from runtime user to rootCVE-2021-25321Fix available7.8 High
- opensuse cryptctl, suse linux enterprise server for sap 12-sp5, manager server 4.0 +2 morecryptctl: client side password hashing is equivalent to clear text password storageCVE-2019-18906Fix available9.8 Critical
- opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 moreinn: %post calls user owned file allowing local privilege escalation to rootCVE-2021-31998Fix available6.8 Medium
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as rootCVE-2021-25317Fix available3.3 Low
- suse hawk2, linux enterprise high availability 12-sp3, linux enterprise high availability 12-sp5 +1 more +3 morehawk: Insecure file permissionsCVE-2021-253147.8 High
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-toolsCVE-2021-25316Fix available3.3 Low
- suse rancherRancher: XSS on /v3/cluster/CVE-2021-25313Fix available7.1 High
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code executionCVE-2021-25315Fix available9.8 Critical
- suse caas platform, caas platform 4.5 +1 moreskuba: Insecure /tmp usage when joining node to clusterCVE-2020-80303.6 Low
- suse caas platform, caas platform 4.5 +1 moreskuba: Insecure handling of private keyCVE-2020-80292.9 Low
- opensuse open build serviceobs: Stored XSSCVE-2020-8031Fix available6.3 Medium
- linux-pam, suse pam +1 moreA flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for...CVE-2020-27780Fix available9.8 Critical
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmpCVE-2020-8027Fix available7.3 High
- suse salt-netapi-client, linux enterprise module for suse manager server 4.1, manager server 3.2 +1 more +3 moresalt-api is accessible to every user on SUSE Manager ServerCVE-2020-8028Fix available9.3 Critical
- opensuse open build serviceobs-service-download_files allows downloading from localhost or intranet hostsCVE-2018-124756.5 Medium
- icinga web 2, debian linux, suse package hub +2 moreIcinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability...CVE-2020-24368Fix available7.5 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- opensuse leap, leap 15.1, leap 15.2 +3 more +5 moreinn: non-root owned filesCVE-2020-8026Fix available8.4 High
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- opensuse leap, leap 15.1, tumbleweed +2 more +4 morekopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackageCVE-2020-80147.7 High
- opensuse factory, leap 15.1, leap 15.2 +2 more +4 moreProblematic permissions in hylafax+ packaging allow escalation from uucp to other usersCVE-2020-8024Fix available5.3 Medium
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...CVE-2020-14147Fix available7.7 High
- opensuse factory, leap 15.1, osc +4 more +6 moreosc: stores downloaded (supposed) RPM in network-controlled filesystem pathsCVE-2019-3681Fix available7.5 High
- opensuse open build service, debian linux +1 moreunauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build ServiceCVE-2020-8021Fix available5.3 Medium
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %postCVE-2020-8019Fix available7.7 High
- suse linux enterprise server 15 sp1, linux enterprise desktop +1 moreUser owned /etc in SLES15-SP1-CHOST-BYOSCVE-2020-80188.4 High
- opensuse autoyast2, suse linux enterprise server 12, linux enterprise server 15 +2 moreDeprecated functionality in autoyast2 automatically imports gpg keys without checking themCVE-2019-18905Fix available4.8 Medium
- opensuse leap, leap 15.1, texlive-filesystem +3 more +5 morerace condition on texlive-filesystem cron job allows for the deletion of unintended filesCVE-2020-80176.2 Medium
- opensuse leap 15.1, texlive-filesystem, suse linux enterprise module for desktop applications 15-sp1 +2 more +4 morerace condition in the packaging of texlive-filesystenCVE-2020-80164.9 Medium
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL InjectionCVE-2020-10804Fix available8.0 High
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- Show moreLoading…