opensuse leap 15.1 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version...

Opensuse Tumbleweed Opensuse Leap 15.1 Opensuse Leap 15.21 Github repository available

7.8

CVSSv3

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Google Android -Opensuse Leap 15.1 Opensuse Leap 15.2

7.5

CVSSv3

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For...

Gnu Gcc Opensuse Leap 15.0 Opensuse Leap 15.12 Github repositories available

5.3

CVSSv3

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation....

Amd Secure Encrypted Virtualization Firmware Opensuse Leap 15.0 Opensuse Leap 15.1

5.4

CVSSv3

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012....

Gnu Ncurses Opensuse Leap 15.0 Opensuse Leap 15.14 Github repositories available

8.8

CVSSv3

Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039....

Sylabs Singularity Opensuse Leap 15.1 Opensuse Leap 15.2

6.7

CVSSv3

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based...

Gnu Grub2 Opensuse Leap 15.1 Opensuse Leap 15.211 Github repositories available

8.8

CVSSv3

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78....

Mozilla Firefox Opensuse Leap 15.1 Opensuse Leap 15.2

8.8

CVSSv3

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page....

Google Chrome Opensuse Leap 15.0 Opensuse Leap 42.3 Opensuse Backports Sle-15 Opensuse Leap 15.1

6.5

CVSSv3

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page....

Google Chrome Opensuse Backports Sle 15.0 Opensuse Leap 15.0 Opensuse Leap 15.1 Opensuse Leap 42.3

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook