opensuse leap 42.3 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior to...

Opensuse Leap 42.3 Opensuse Leap 15.0

7.5

CVSSv3

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets....

Heimdal Project Heimdal Opensuse Leap 42.2 Opensuse Leap 42.3

8.8

CVSSv3

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page....

Google Chrome Opensuse Leap 15.0 Opensuse Leap 42.3 Opensuse Backports Sle-15 Opensuse Leap 15.1

6.5

CVSSv3

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page....

Google Chrome Opensuse Backports Sle 15.0 Opensuse Leap 15.0 Opensuse Leap 15.1 Opensuse Leap 42.3

8.8

CVSSv3

The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade....

Opensuse Leap 42.3

9.8

CVSSv3

** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION...

Pocoo Jinja2 2.10 Opensuse Leap 15.0 Opensuse Leap 42.31 EDB exploit available1 Github repository available

6.3

CVSSv3

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service....

Redhat Libvirt Opensuse Leap 42.3 Opensuse Leap 15.0

3.3

CVSSv3

hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest....

Qemu Qemu Opensuse Leap 15.0 Opensuse Leap 42.3

6.5

CVSSv3

Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page....

Google Chrome Opensuse Backports Sle 15.0 Opensuse Leap 15.0 Opensuse Leap 15.1 Opensuse Leap 42.3

8.8

CVSSv3

Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page....

Google Chrome Opensuse Backports Sle-15 Opensuse Leap 15.0 Opensuse Leap 15.1 Opensuse Leap 42.3 Fedoraproject Fedora 30

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook