CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3544 matches found

Mend•added 2020/01/27 8:30 a.m.•3 views

CVE-2018-12476

Relative Path Traversal vulnerability in obs-service-tarscm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise...

7.5CVSS0.01026EPSS

SaveExploits0References1

Cvelist•added 2020/01/27 8:30 a.m.•50 views

CVE-2018-12476 obs-service-extract_file's outfilename parameter allows to write files outside of package directory

4.3CVSS7.5AI score0.01026EPSS

SaveExploits0References1

CVE•added 2020/01/27 8:30 a.m.•147 views

CVE-2018-12476

CVE-2018-12476 affects SUSE/OpenSUSE packages: obs-service-tar_scm in SLE-15/openSUSE Factory. The issue is a Relative Path Traversal via the outfilename parameter that could allow a remote attacker with repository control to overwrite files on the local user’s machine. Affected versions are OBS-...

7.5CVSS5.6AI score0.01026EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/01/27 12:00 a.m.•4 views

CVE-2018-20105: Insertion of Sensitive Information into Log File

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2...

5.5CVSS6.1AI score0.00425EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2020/01/27 12:00 a.m.•7 views

CVE-2018-12476: Relative Path Traversal

7.5CVSS7.8AI score0.01026EPSS

SaveExploits0References3

NVD•added 2020/01/24 4:15 p.m.•25 views

CVE-2019-18900

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp version...

4CVSS3.7AI score0.00312EPSS

SaveExploits0References3

OSV•added 2020/01/24 4:15 p.m.•23 views

CVE-2019-18900

3.3CVSS3.7AI score

SaveExploits0References3

UbuntuCve•added 2020/01/24 4:15 p.m.•38 views

CVE-2019-18900

4CVSS6.6AI score0.00312EPSS

SaveExploits0References2

Prion•added 2020/01/24 4:15 p.m.•18 views

Design/Logic Flaw

2.1CVSS3.5AI score0.00312EPSS

SaveExploits0References3Affected Software1

CVE•added 2020/01/24 3:15 p.m.•175 views

CVE-2019-18900

CVE-2019-18900 affects libzypp in SUSE CaaS Platform 3.0 and SUSE Linux Enterprise Server 12/15, where an incorrect default-permissions issue could allow local attackers to read a cookie store used by libzypp and expose private cookies. Affected versions include: SUSE CaaS Platform 3.0 libzypp &l...

4CVSS6AI score0.00312EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2020/01/24 3:15 p.m.•43 views

CVE-2019-18900 libzypp stores cookies world readable

4CVSS3.4AI score0.00312EPSS

SaveExploits0References3

Mend•added 2020/01/24 3:15 p.m.•4 views

CVE-2019-18900

5.1CVSS0.00312EPSS

SaveExploits0References3

Debian CVE•added 2020/01/24 3:15 p.m.•54 views

CVE-2019-18900

4CVSS4AI score0.00312EPSS

SaveExploits0

NVD•added 2020/01/24 10:15 a.m.•28 views

CVE-2019-3693

A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This...

7.8CVSS7.5AI score0.00365EPSS

SaveExploits0References3

Prion•added 2020/01/24 10:15 a.m.•25 views

Spoofing

7.2CVSS7.5AI score0.00365EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2020/01/24 10:05 a.m.•40 views

CVE-2019-3693 Local privilege escalation from user wwwrun to root in the packaging of mailman

7.7CVSS7.5AI score0.00365EPSS

SaveExploits0References3

NVD•added 2020/01/24 9:15 a.m.•28 views

CVE-2019-3687

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

4CVSS3.9AI score0.00275EPSS

SaveExploits0References2

Cvelist•added 2020/01/24 8:50 a.m.•42 views

CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...

7.7CVSS7.6AI score0.005EPSS

SaveExploits1References3

CVE•added 2020/01/24 8:50 a.m.•169 views

CVE-2019-3692

CVE-2019-3692 affects the OpenSUSE/SUSE inn package and enables local privilege escalation from a normal user to root via symlink attacks. Affected packages/versions include SUSE Linux Enterprise Server 11 inn 2.4.2-170.21.3.1 and earlier; openSUSE Factory inn 2.6.2-2.2 and earlier; openSUSE Leap...

7.8CVSS7.2AI score0.005EPSS

SaveExploits1References3Affected Software1

Mend•added 2020/01/24 8:25 a.m.•5 views

CVE-2019-3687

5.1CVSS0.00275EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by