CVE-2022-31254 rmt-server-pubcloud allows to escalate from user _rmt to root

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the rmt user to escalate to...

CVE-2023-22643 libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

CVE-2022-38657 An open redirect to malicious sites affects HCL Leap

An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page...

CVE-2022-38657 An open redirect to malicious sites affects HCL Leap

An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2023:0033-1 Rating: important References: Cross-References: CVE-2023-21884 CVE-2023-21885 CVE-2023-21886 CVE-2023-21889 CVE-2023-21898 CVE-2023-21899 CVSS scores: CVE-2023-21884 NVD : 4.4...

SUSE SLES15 Security Update : libzypp-plugin-appdata (SUSE-SU-2023:0140-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0140-1 advisory. - CVE-2023-22643: Fixed potential shell injection related to malicious repo names bsc1206836. - Added hardening to systemd service bsc118140...

openSUSE 15 Security Update : pcp (SUSE-SU-2022:1509-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1509-1 advisory. - CVE-2020-8025: Fixed outdated entries in permissions profiles for /var/lib/pcp/tmp/ bsc1171883. Tenable has extracted the preceding description block...

SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2023:0020-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0020-1 advisory. Update to version 2.10: - Add option to turn off system token support bsc1205089 - Update the lastseenat column on zypper...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0022-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0022-1 advisory. Update to version 2.10: - Add option to turn off system token support bsc1205089 - Update the lastseenat column on zypper service refresh - ...

PT-2023-1560 · Suse · Libzypp-Plugin-Appdata +1

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426 Description: The issue is related to an Improper...

SUSE SLES15 Security Update : saphanabootstrap-formula (SUSE-SU-2023:0010-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0010-1 advisory. - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary user...

Vulnerabilities fixed in X.Org X Server

Vulnerabilities have been fixed in X.Org X Server. The vulnerabilities potentially enable a malicious party to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Increased user privileges Misuse of the...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10239-1 Rating: important References: Cross-References: CVE-2022-3885 CVE-2022-3886 CVE-2022-3887 CVE-2022-3888 CVE-2022-3889 CVSS scores: CVE-2022-3885 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

The vulnerability in the Hawk2 web interface of SUSE Linux Enterprise Server and OpenSUSE Leap allows a malicious individual to escalate their privileges.

The vulnerability in the Hawk2 web interface of SUSE Linux Enterprise Server and OpenSUSE Leap involves the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10219-1 Rating: important References: Cross-References: CVE-2022-3723 CVSS scores: CVE-2022-3723 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree An update tha...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10218-1 Rating: important References: Cross-References: CVE-2022-3723 CVSS scores: CVE-2022-3723 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3:NonFree An update tha...

PT-2022-6516 · Suse · Opensuse Leap +3

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10182-1 Rating: important References: Cross-References: CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449 CVE-2022-3450 Affected Products: openSUSE Leap 15.4:NonFree An update that fixes 6...

Security update for v4l2loopback (moderate)

openSUSE Security Update: Security update for v4l2loopback Announcement ID: openSUSE-SU-2022:10160-1 Rating: moderate References: 1202156 Cross-References: CVE-2022-2652 CVSS scores: CVE-2022-2652 NVD : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2022-2652 SUSE: 6...

Security update for v4l2loopback (moderate)

openSUSE Security Update: Security update for v4l2loopback Announcement ID: openSUSE-SU-2022:10159-1 Rating: moderate References: 1202156 Cross-References: CVE-2022-2652 CVSS scores: CVE-2022-2652 NVD : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2022-2652 SUSE: 6...