VYPR
← OpenSUSE

Vendor CVEs

OpenSUSE

All CVEs

3,309 total · sorted by risk
  • CVE-2016-2038MedFeb 20, 2016
    PhpMyAdmin
    phpMyAdmin
    risk 0.28cvss 5.3epss 0.03

    phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.

  • CVE-2016-1626MedFeb 14, 2016
    Google
    Chrome
    risk 0.28cvss 4.3epss 0.01

    The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

  • CVE-2016-1625MedFeb 14, 2016
    Google
    Chrome
    risk 0.28cvss 4.3epss 0.01

    The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to…

  • CVE-2015-8629MedFeb 13, 2016
    Mit
    Kerberos 5
    risk 0.28cvss 5.3epss 0.04

    The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a…

  • CVE-2015-8792MedJan 29, 2016
    Matroska Org
    Libmatroska
    risk 0.28cvss 5.3epss 0.01

    The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.

  • CVE-2016-1494MedJan 13, 2016
    Python (programming language)
    Rsa
    risk 0.28cvss 5.3epss 0.07

    The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

  • CVE-2024-54159MedNov 29, 2024
    Bristot
    Stalld
    risk 0.27cvss 4.1epss 0.00

    stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack.

  • CVE-2020-14792MedOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-15719MedJul 14, 2020
    OpenLDAP
    Openldap
    risk 0.27cvss 4.2epss 0.03

    libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat…

  • CVE-2019-20807MedMay 28, 2020
    Vim
    Vim
    risk 0.27cvss 5.3epss 0.00

    In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

  • CVE-2019-17594MedOct 14, 2019
    ncurses
    ncurses
    risk 0.27cvss 5.3epss 0.01

    There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

  • CVE-2019-16233MedSep 11, 2019
    Linux
    Kernel
    risk 0.27cvss 4.1epss 0.00

    drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

  • CVE-2019-16232MedSep 11, 2019
    Linux
    Kernel
    risk 0.27cvss 4.1epss 0.01

    drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

  • CVE-2019-16231MedSep 11, 2019
    Linux
    Kernel
    risk 0.27cvss 4.1epss 0.00

    drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

  • CVE-2016-0668MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.27cvss 4.1epss 0.01

    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

  • CVE-2018-20105MedJan 27, 2020
    Yast2 Rmt Project
    Yast2 Rmt
    risk 0.26cvss 4.0epss 0.00

    A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions…

  • CVE-2019-18900MedJan 24, 2020
    OpenSUSE
    Libzypp
    risk 0.26cvss 4.0epss 0.00

    : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform…

  • CVE-2020-16092LowAug 11, 2020
    QEMU
    Qemu
    risk 0.25cvss 3.8epss 0.00

    In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition…

  • CVE-2020-13361LowMay 28, 2020
    QEMU
    Qemu
    risk 0.25cvss 3.9epss 0.00

    In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.

  • CVE-2019-11045LowDec 23, 2019
    PHP
    PHP
    risk 0.25cvss 3.7epss 0.09

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is…

  • CVE-2019-12068LowSep 24, 2019
    QEMU
    Qemu
    risk 0.25cvss 3.8epss 0.01

    In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to…

  • CVE-2019-13057MedJul 26, 2019
    OpenLDAP
    Openldap
    risk 0.25cvss 4.9epss 0.03

    An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from…

  • CVE-2019-2627MedApr 23, 2019
    MariaDB
    MariaDB
    risk 0.25cvss 4.9epss 0.03

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with…

  • CVE-2020-14797LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14782LowOct 21, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-14781LowOct 21, 2020
    NetApp
    Hci Management Node
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14779LowOct 21, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-15211MedSep 25, 2020
    Google
    Tensorflow
    risk 0.24cvss 4.8epss 0.01

    In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer…

  • CVE-2019-20919MedSep 17, 2020
    Perl Foundation
    Dbi
    risk 0.24cvss 4.7epss 0.01

    An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.

  • CVE-2020-14581LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14579LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14578LowJul 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14577LowJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14573LowJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2020-2778LowApr 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.02

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…

  • CVE-2020-2773LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2757LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2756LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2755LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2754LowApr 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-2659LowJan 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2654LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2020-2590LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2583LowJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2019-11046LowDec 23, 2019
    PHP
    PHP
    risk 0.24cvss 3.7epss 0.04

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS…

  • CVE-2019-19066MedNov 18, 2019
    Linux
    Kernel
    risk 0.24cvss 4.7epss 0.00

    A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.

  • CVE-2019-19065MedNov 18, 2019
    Linux
    Kernel
    risk 0.24cvss 4.7epss 0.00

    A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not…

  • CVE-2019-2992LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2988LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2019-2983LowOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.24cvss 3.7epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…

Page 40 of 67