CVE-2023-22643
Published Feb 7, 2023An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP…
Vendor/product archive
suse / suse_linux_enterprise_server CVEs
Beta · best-effort142 CVEs tagged to suse / suse_linux_enterprise_server — 33 Critical, 56 High, 44 Medium, 9 Low, 0 Unrated.
CVE-2022-21944
Published Jan 26, 2022A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to roo…
CVE-2021-25315
Published Mar 3, 2021CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without…
CVE-2020-15707
Published Jul 29, 2020Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the function…
CVE-2020-15706
Published Jul 29, 2020GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…
CVE-2020-15705
Published Jul 29, 2020GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-6449
Published Mar 23, 2020Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 4
- Buzz score
- 27.6
CVE-2020-6429
Published Mar 23, 2020Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2020-6428
Published Mar 23, 2020Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2020-6427
Published Mar 23, 2020Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2020-6426
Published Mar 23, 2020Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2020-6424
Published Mar 23, 2020Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2020-6422
Published Mar 23, 2020Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2019-15624
Published Feb 4, 2020Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.
CVE-2018-20105
Published Jan 27, 2020A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they…
CVE-2018-12476
Published Jan 27, 2020Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwri…
CVE-2019-18900
Published Jan 24, 2020: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to rea…
CVE-2019-3691
Published Jan 23, 2020A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges fro…
CVE-2019-18898
Published Jan 23, 2020UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges f…
CVE-2020-5504
Published Jan 9, 2020In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creat…
CVE-2019-3688
Published Oct 7, 2019The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and includi…
CVE-2019-3475
Published Feb 20, 2019A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This v…
CVE-2019-3474
Published Feb 20, 2019A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files…
CVE-2018-19655
Published Nov 29, 2018A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-fl…
CVE-2018-12122
Published Nov 28, 2018Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers ver…
Showing 1-25 of 142 CVEsPage 1 of 6