CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8648 matches found

OSV•added 2020/03/02 4:01 p.m.•20 views

SUSE-SU-2020:0560-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: An issue was discovered in ext4protectreservedinode in fs/ext4/blockvalidity.c that allowed attackers to cause a soft lockup via a crafted journal...

10CVSS9.3AI score0.12651EPSS

SaveExploits13References269

CVE•added 2020/03/02 3:20 p.m.•168 views

CVE-2019-18897

CVE-2019-18897 is a local privilege escalation in Salt packaging on SUSE/OpenSUSE derivatives (SUSE SLES 12/15 and openSUSE Factory) due to a UNIX Symlink Following vulnerability in salt-master packaging. Affected: SUSE SLES 12 salt-master 2019.2.0-46.83.1 and prior; SLES 15 salt-master 2019.2.0-...

8.4CVSS7.7AI score0.00386EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/03/02 3:20 p.m.•41 views

CVE-2019-18897 Local privilege escalation from user salt to root

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS8.9AI score0.00386EPSS

SaveExploits0References2

NVD•added 2020/02/28 2:15 p.m.•26 views

CVE-2019-3698

UNIX Symbolic Link Symlink Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linu...

7CVSS6AI score0.00684EPSS

SaveExploits1References3

OSV•added 2020/02/28 2:15 p.m.•24 views

CVE-2019-3698

7CVSS6.7AI score

SaveExploits0References3

UbuntuCve•added 2020/02/28 2:15 p.m.•21 views

CVE-2019-3698

7CVSS6.7AI score0.00684EPSS

SaveExploits1References1

Cvelist•added 2020/02/28 1:20 p.m.•30 views

CVE-2019-3698 nagios cron job allows privilege escalation from user nagios to root

5.7CVSS6.7AI score0.00684EPSS

SaveExploits1References3

CVE•added 2020/02/28 1:20 p.m.•168 views

CVE-2019-3698

CVE-2019-3698 is a local Symlink Following vulnerability in the cronjob used by Nagios on SUSE/OpenSUSE products. Affected: SUSE Linux Enterprise Server 12 Nagios 3.5.1-5.27 and earlier, SLES 11 Nagios 3.0.6-1.25.36.3.1 and earlier, and openSUSE Factory Nagios 4.4.5-2.1 and earlier. Root cause is...

7CVSS5.9AI score0.00684EPSS

SaveExploits1References3Affected Software1

NVD•added 2020/01/27 9:15 a.m.•28 views

CVE-2018-20105

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2...

5.5CVSS4.6AI score0.00425EPSS

SaveExploits0References3

NVD•added 2020/01/27 9:15 a.m.•31 views

CVE-2018-12476

Relative Path Traversal vulnerability in obs-service-tarscm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise...

7.5CVSS5.7AI score0.01026EPSS

SaveExploits0References1

OSV•added 2020/01/27 9:15 a.m.•10 views

CVE-2018-20105

5.5CVSS5.5AI score0.00425EPSS

SaveExploits0References3

Prion•added 2020/01/27 9:15 a.m.•17 views

Design/Logic Flaw

2.1CVSS5.3AI score0.00425EPSS

SaveExploits0References3Affected Software3

CVE•added 2020/01/27 8:50 a.m.•185 views

CVE-2018-20105

The related OpenSUSE/SUSE entries confirm CVE-2018-20105 affects yast2-rmt and was fixed by updating to yast2-rmt 1.3.0 (openSUSE-2020-320, SUSE-SU-2020:0578-1). The mitigation is to apply this update; the fix addresses an exposure of the CA private key passphrase contained in log files. Summary ...

5.5CVSS4.5AI score0.00425EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2020/01/27 8:50 a.m.•33 views

CVE-2018-20105 yast2-rmt exposes CA private key passhrase in log-file

4CVSS5.1AI score0.00425EPSS

SaveExploits0References3

Cvelist•added 2020/01/27 8:30 a.m.•37 views

CVE-2018-12476 obs-service-extract_file's outfilename parameter allows to write files outside of package directory

4.3CVSS7.5AI score0.01026EPSS

SaveExploits0References1

CVE•added 2020/01/27 8:30 a.m.•133 views

CVE-2018-12476

CVE-2018-12476 affects SUSE/OpenSUSE packages: obs-service-tar_scm in SLE-15/openSUSE Factory. The issue is a Relative Path Traversal via the outfilename parameter that could allow a remote attacker with repository control to overwrite files on the local user’s machine. Affected versions are OBS-...

7.5CVSS5.6AI score0.01026EPSS

SaveExploits0References1Affected Software1

NVD•added 2020/01/24 4:15 p.m.•20 views

CVE-2019-18900

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp version...

4CVSS3.7AI score0.00301EPSS

SaveExploits0References3

OSV•added 2020/01/24 4:15 p.m.•16 views

CVE-2019-18900

3.3CVSS3.7AI score

SaveExploits0References3

OSV•added 2020/01/24 4:15 p.m.•2 views

DEBIAN-CVE-2019-18900

3.3CVSS6.2AI score0.00301EPSS

SaveExploits0References1

Prion•added 2020/01/24 4:15 p.m.•15 views

Design/Logic Flaw

2.1CVSS3.5AI score0.00301EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by