CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8603 matches found

OSV•added 2020/01/24 10:15 a.m.•5 views

CVE-2019-3693

A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This...

7.8CVSS7.1AI score0.00365EPSS

SaveExploits0References3

Prion•added 2020/01/24 10:15 a.m.•19 views

Spoofing

7.2CVSS7.5AI score0.00365EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2020/01/24 10:05 a.m.•31 views

CVE-2019-3693 Local privilege escalation from user wwwrun to root in the packaging of mailman

7.7CVSS7.5AI score0.00365EPSS

SaveExploits0References3

OSV•added 2020/01/24 9:15 a.m.•11 views

CVE-2019-3692

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...

7.8CVSS7.1AI score0.005EPSS

SaveExploits1References3

NVD•added 2020/01/24 9:15 a.m.•20 views

CVE-2019-3687

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

4CVSS3.9AI score0.00275EPSS

SaveExploits0References2

Prion•added 2020/01/24 9:15 a.m.•10 views

Code injection

1.9CVSS3.8AI score0.00275EPSS

SaveExploits0References2

CVE•added 2020/01/24 8:50 a.m.•152 views

CVE-2019-3692

CVE-2019-3692 affects the OpenSUSE/SUSE inn package and enables local privilege escalation from a normal user to root via symlink attacks. Affected packages/versions include SUSE Linux Enterprise Server 11 inn 2.4.2-170.21.3.1 and earlier; openSUSE Factory inn 2.6.2-2.2 and earlier; openSUSE Leap...

7.8CVSS7.5AI score0.005EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2020/01/24 8:50 a.m.•33 views

CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn

7.7CVSS7.6AI score0.005EPSS

SaveExploits1References3

CVE•added 2020/01/24 8:25 a.m.•149 views

CVE-2019-3687

CVE-2019-3687 affects the permissions package in SUSE/openSUSE SLE/OpenSUSE, allowing local users to run dumpcap with the easy permission profile and sniff network traffic. Affected range: permissions versions from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119...

4CVSS3.9AI score0.00275EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/01/24 8:25 a.m.•26 views

CVE-2019-3687 "easy" permission profile allows everyone execute dumpcap and read all network traffic

4CVSS4AI score0.00275EPSS

SaveExploits0References2

NVD•added 2020/01/23 4:15 p.m.•20 views

CVE-2019-3691

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

7.8CVSS7.5AI score0.00519EPSS

SaveExploits1References1

OSV•added 2020/01/23 4:15 p.m.•6 views

CVE-2019-3691

7.8CVSS7.1AI score0.00519EPSS

SaveExploits1References1

Cvelist•added 2020/01/23 4:00 p.m.•21 views

CVE-2019-3691 Local privilege escalation from user munge to root

7.7CVSS7.5AI score0.00519EPSS

SaveExploits1References1

CVE•added 2020/01/23 4:00 p.m.•123 views

CVE-2019-3691

CVE-2019-3691 is a local privilege escalation in the munge packaging for SUSE Linux Enterprise Server 15 and openSUSE Factory, caused by a Symbolic Link (Symlink) Following issue. Affected Munge versions are prior to 0.5.13-4.3.1 on SLES 15 and prior to 0.5.13-6.1 on openSUSE Factory. The vulnera...

7.8CVSS7.4AI score0.00519EPSS

SaveExploits1References1Affected Software1

OSV•added 2020/01/23 2:15 p.m.•4 views

CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

7.8CVSS7.1AI score0.00482EPSS

SaveExploits1References2

NVD•added 2020/01/23 2:15 p.m.•25 views

CVE-2019-18898

7.8CVSS7.5AI score0.00482EPSS

SaveExploits1References2

Prion•added 2020/01/23 2:15 p.m.•15 views

Spoofing

7.2CVSS7.5AI score0.00482EPSS

SaveExploits1References2Affected Software2

CVE•added 2020/01/23 2:05 p.m.•174 views

CVE-2019-18898

CVE-2019-18898 concerns a local symlink attack in the trousers package for SUSE/openSUSE, allowing a local attacker (tss user) to gain ownership of arbitrary files during installation/update. The issue affects SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1 and openSUS...

7.8CVSS7.4AI score0.00482EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2020/01/23 2:05 p.m.•27 views

CVE-2019-18898 trousers: Local privilege escalation from tss to root

7.7CVSS7.5AI score0.00482EPSS

SaveExploits1References2

Tenable Nessus•added 2020/01/21 12:00 a.m.•20 views

SUSE SLES12 Security Update : libssh (SUSE-SU-2020:0131-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

9.3CVSS6.6AI score0.03148EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by