opensuse backports sle 15.0 vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

An issue exists in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.

Gnu Libredwg 0.9.2 Opensuse Backports Sle 15.0 Opensuse Leap 15.1

6.5

CVSSv3

An issue exists in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.

Gnu Libredwg 0.9.2 Opensuse Backports Sle 15.0 Opensuse Leap 15.1

7.8

CVSSv3

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-...

Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2 Opensuse Tumbleweed

9.8

CVSSv3

rcube_image.php in Roundcube Webmail prior to 1.4.4 allows malicious users to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

Roundcube Webmail Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

2 Github repositories1 Article

9.8

CVSSv3

Roundcube Webmail prior to 1.4.4 allows malicious users to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.

Roundcube Webmail Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

1 Github repository

4.3

CVSSv3

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior version...

Otrs Otrs Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

5.5

CVSSv3

In kdeconnect-kde (aka KDE Connect) prior to 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack.

Kde Kdeconnect Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

7.5

CVSSv3

An issue has been found in PowerDNS Recursor prior to 4.1.18, 4.2.x prior to 4.2.5, and 4.3.x prior to 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS...

Powerdns Recursor Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

9.3

CVSSv3

Singularity (an open source container platform) from version 3.1.1 up to and including 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite/create any files on the host filesystem ...

Sylabs Singularity Opensuse Leap 15.1 Opensuse Leap 15.2 Opensuse Backports Sle 15.0

8.8

CVSSv3

A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.

Ui Edgeswitch Firmware Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Opensuse Leap 15.2

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook