Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opensuse backports sle-15 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2020-14983
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
Chocolate-doom Crispy Doom 5.8.0Chocolate-doom Chocolate Doom 3.0.0Opensuse Leap 15.1Opensuse Leap 15.2Opensuse Backports Sle-15
9.8
CVSSv3
CVE-2020-10938
GraphicsMagick prior to 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c.
Graphicsmagick GraphicsmagickDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Backports Sle-15Opensuse Leap 15.1
9.8
CVSSv3
CVE-2019-19950
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
Graphicsmagick Graphicsmagick 1.4Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Backports Sle-15
9.8
CVSSv3
CVE-2019-19951
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.
Graphicsmagick Graphicsmagick 1.4Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Backports Sle-15
9.8
CVSSv3
CVE-2018-20177
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.
Rdesktop RdesktopDebian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.1Opensuse Backports Sle-15
9.6
CVSSv3
CVE-2020-6493
Use after free in WebAuthentication in Google Chrome before 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Backports Sle-15
9.1
CVSSv3
CVE-2019-19953
In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.
Graphicsmagick Graphicsmagick 1.4Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Backports Sle-15
8.8
CVSSv3
CVE-2020-6443
Insufficient data validation in developer tools in Google Chrome before 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Backports Sle-15
8.8
CVSSv3
CVE-2020-6439
Insufficient policy enforcement in navigations in Google Chrome before 81.0.4044.92 allowed a remote malicious user to bypass security UI via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Backports Sle-15
8.8
CVSSv3
CVE-2020-6452
Heap buffer overflow in media in Google Chrome before 80.0.3987.162 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeFedoraproject Fedora 30Opensuse Leap 15.1Fedoraproject Fedora 31Opensuse Backports Sle-15
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook