Filters
Software
opensuse leap
794
opensuse opensuse
363
opensuse backports sle
161
opensuse backports
35
opensuse factory
13
opensuse project leap
13
opensuse open build service
11
opensuse project suse linux enterprise desktop
6
opensuse evergreen
5
opensuse libsolv
5
opensuse project suse linux enterprise server
5
opensuse project suse linux enterprise software development kit
5
opensuse project suse linux enterprise workstation extension
5
opensuse openldap2
3
opensuse project suse linux enterprise debuginfo
3
opensuse tumbleweed
3
opensuse libeconf
2
opensuse pcp
2
opensuse rmt-server
2
opensuse supportutils
2
opensuse wicked
2
opensuse cyrus-sasl
1
opensuse factory watchman
1
opensuse inn
1
opensuse libzypp
1
opensuse libzypp-plugin-appdata
1
opensuse munge
1
opensuse munin
1
opensuse obs-service-source validator
1
opensuse open buildservice
1
opensuse project opensuse
1
opensuse project suse linux enterprise server for raspberry pi
1
opensuse python-postorius
1
opensuse suse linux enterprise server
1
opensuse sysconfig
1
opensuse texlive-filesystem
1
opensuse travel support program
1
opensuse tumbleweed kopano-spamd
1
opensuse welcome
1
opensuse yast2-samba-provision
1
openSUSE LeapA Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux En…
7.8
First published (updated )
openSUSE libeconfA stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c …
8.8
First published (updated )
openSUSE libeconfA stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in l…
8.8
First published (updated )
Opensuse WelcomeopenSUSE-welcome: local privilege escalation when choosing XFCE desktop layout (CVE-2023-32184)
7.8
First published (updated )
openSUSE TumbleweedIncorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users wi…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SUSE Linux Enterprise Module for SAP Applicationssaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
7.8
First published (updated )
Opensuse Libzypp-plugin-appdatalibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls
7.8
First published (updated )
Opensuse Rmt-serverrmt-server-pubcloud allows to escalate from user _rmt to root
7.8
First published (updated )
Opensuse Travel Support Programtravel-support-program vulnerable to data exfiltration via Ransack query injection
7.5
First published (updated )
Opensuse Openldap2openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
openSUSE Factorysendmail: mail to root privilege escalation via sm-client.pre script
7.8
First published (updated )
openSUSE Tumbleweedkeylime %post scriplet allows for privilege escalation from keylime user to root
7.8
First published (updated )
openSUSE Open Build Servicelogin-proxy sends password to attacker-provided domain
8.8
First published (updated )
openSUSE Factory watchmanwatchman: chown in watchman@.socket unit allows symlink attack
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
rubygems/cgiCGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affe…
7.5
First published (updated )
Ruby-lang DateDate.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Suse Arpwatcharpwatch: Local privilege escalation from runtime user to root
7.8
First published (updated )
Python-hyperkitty Project Python-hyperkittypython-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root
7.8
First published (updated )
Opensuse Inninn: %post calls user owned file allowing local privilege escalation to root
7.8
First published (updated )
Opensuse Python-postoriuspython-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root
7.8
First published (updated )
openSUSE Factoryvirtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Opensuse Cyrus-saslLocal privilege escalation to root due to insecure tmp file usage
7
First published (updated )
Google ChromeGoogle Chromium V8 Type Confusion Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
openSUSE LeapAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of servi…
7.8
First published (updated )
openSUSE LeapAn issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a den…
7.8
First published (updated )
PowerDNS RecursorAn issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3…
7.5
First published (updated )
Google ChromeInsufficient policy enforcement in ANGLE
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/wiresharkIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector coul…
7.5
First published (updated )
ubuntu/wiresharkIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. Th…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraUse after free in password manager
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Tigervnc TigervncIn rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS c…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.