Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

8603 matches found

NVD
NVD•added 2020/03/02 5:15 p.m.•25 views

CVE-2019-18903

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1...

9.8CVSS8.7AI score0.02416EPSS
SaveExploits0References1
NVD
NVD•added 2020/03/02 5:15 p.m.•27 views

CVE-2019-18902

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1...

9.8CVSS8.8AI score0.02416EPSS
SaveExploits0References1
Prion
Prion•added 2020/03/02 5:15 p.m.•16 views

Design/Logic Flaw

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1...

7.5CVSS9.4AI score0.02416EPSS
SaveExploits0References1Affected Software2
Prion
Prion•added 2020/03/02 5:15 p.m.•21 views

Design/Logic Flaw

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1...

7.5CVSS9.4AI score0.02416EPSS
SaveExploits0References1Affected Software2
Prion
Prion•added 2020/03/02 5:15 p.m.•17 views

Design/Logic Flaw

A UNIX Symbolic Link Symlink Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be...

1.9CVSS3.8AI score0.00317EPSS
SaveExploits0References2Affected Software2
CVE
CVE•added 2020/03/02 4:45 p.m.•160 views

CVE-2019-18902

CVE-2019-18902 is a Use After Free vulnerability in the Wicked service used by SUSE Linux Enterprise Server 12/15 and related openSUSE variants. The issue affects Wicked components prior to specific versions (SLES 12 <0.6.60-3.5.1; SLES 15 <0.6.60-3.21.1; openSUSE Leap 15.1 <0.6.60-lp151...

9.8CVSS8.7AI score0.02416EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist•added 2020/03/02 4:45 p.m.•27 views

CVE-2019-18903 wicked: Use-after-free when receiving invalid DHCP6 IA_PD option

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1...

7.5CVSS9.5AI score0.02416EPSS
SaveExploits0References1
CVE
CVE•added 2020/03/02 4:45 p.m.•147 views

CVE-2019-18903

CVE-2019-18903 describes a Use-After-Free in the wicked service across SUSE/openSUSE products. Affected: SUSE Linux Enterprise Server 12 wicked < 0.6.60-2.18.1 and SLES 15 wicked < 0.6.60-28.26.1; openSUSE Leap 15.1 wicked < 0.6.60-lp151.2.9.1; openSUSE Factory wicked

9.8CVSS8.7AI score0.02416EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist•added 2020/03/02 4:45 p.m.•32 views

CVE-2019-18902 wicked: Use-after-free when receiving invalid DHCP6 client options

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1...

7.5CVSS9.5AI score0.02416EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2020/03/02 4:35 p.m.•36 views

CVE-2020-8013 permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim

A UNIX Symbolic Link Symlink Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be...

2.2CVSS4AI score0.00317EPSS
SaveExploits0References2
NVD
NVD•added 2020/03/02 4:15 p.m.•34 views

CVE-2019-18897

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS8.2AI score0.00386EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2020/03/02 4:15 p.m.•23 views

CVE-2019-18897

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS7.1AI score0.00386EPSS
SaveExploits0References2
Prion
Prion•added 2020/03/02 4:15 p.m.•20 views

Design/Logic Flaw

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

7.2CVSS7.5AI score0.00386EPSS
SaveExploits0References2Affected Software2
Prion
Prion•added 2020/03/02 4:15 p.m.•20 views

Spoofing

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...

2.1CVSS5.3AI score0.0038EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist•added 2020/03/02 4:10 p.m.•32 views

CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...

5.1CVSS5.3AI score0.0038EPSS
SaveExploits0References2
OSV
OSV•added 2020/03/02 4:01 p.m.•18 views

SUSE-SU-2020:0560-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: An issue was discovered in ext4protectreservedinode in fs/ext4/blockvalidity.c that allowed attackers to cause a soft lockup via a crafted journal...

10CVSS9.3AI score0.12651EPSS
SaveExploits13References269
CVE
CVE•added 2020/03/02 3:20 p.m.•166 views

CVE-2019-18897

CVE-2019-18897 is a local privilege escalation in Salt packaging on SUSE/OpenSUSE derivatives (SUSE SLES 12/15 and openSUSE Factory) due to a UNIX Symlink Following vulnerability in salt-master packaging. Affected: SUSE SLES 12 salt-master 2019.2.0-46.83.1 and prior; SLES 15 salt-master 2019.2.0-...

8.4CVSS7.7AI score0.00386EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2020/03/02 3:20 p.m.•41 views

CVE-2019-18897 Local privilege escalation from user salt to root

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS8.9AI score0.00386EPSS
SaveExploits0References2
NVD
NVD•added 2020/02/28 2:15 p.m.•26 views

CVE-2019-3698

UNIX Symbolic Link Symlink Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linu...

7CVSS6AI score0.00684EPSS
SaveExploits1References3
OSV
OSV•added 2020/02/28 2:15 p.m.•24 views

CVE-2019-3698

UNIX Symbolic Link Symlink Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linu...

7CVSS6.7AI score
SaveExploits0References3
Rows per page
Query Builder