CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8648 matches found

UbuntuCve•added 2020/01/24 4:15 p.m.•34 views

CVE-2019-18900

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp version...

4CVSS6.6AI score0.00301EPSS

SaveExploits0References2

CVE•added 2020/01/24 3:15 p.m.•162 views

CVE-2019-18900

CVE-2019-18900 affects libzypp in SUSE CaaS Platform 3.0 and SUSE Linux Enterprise Server 12/15, where an incorrect default-permissions issue could allow local attackers to read a cookie store used by libzypp and expose private cookies. Affected versions include: SUSE CaaS Platform 3.0 libzypp &l...

4CVSS3.4AI score0.00301EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2020/01/24 3:15 p.m.•32 views

CVE-2019-18900 libzypp stores cookies world readable

4CVSS3.4AI score0.00301EPSS

SaveExploits0References3

Debian CVE•added 2020/01/24 3:15 p.m.•44 views

CVE-2019-18900

4CVSS4AI score0.00301EPSS

SaveExploits0

OSV•added 2020/01/24 10:15 a.m.•5 views

CVE-2019-3693

A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This...

7.8CVSS7.1AI score0.00365EPSS

SaveExploits0References3

NVD•added 2020/01/24 10:15 a.m.•23 views

CVE-2019-3693

7.8CVSS7.5AI score0.00365EPSS

SaveExploits0References3

Prion•added 2020/01/24 10:15 a.m.•19 views

Spoofing

7.2CVSS7.5AI score0.00365EPSS

SaveExploits0References3Affected Software2

Cvelist•added 2020/01/24 10:05 a.m.•31 views

CVE-2019-3693 Local privilege escalation from user wwwrun to root in the packaging of mailman

7.7CVSS7.5AI score0.00365EPSS

SaveExploits0References3

OSV•added 2020/01/24 9:15 a.m.•13 views

CVE-2019-3692

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...

7.8CVSS7.1AI score0.005EPSS

SaveExploits1References3

NVD•added 2020/01/24 9:15 a.m.•21 views

CVE-2019-3687

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

4CVSS3.9AI score0.00275EPSS

SaveExploits0References2

Prion•added 2020/01/24 9:15 a.m.•11 views

Code injection

1.9CVSS3.8AI score0.00275EPSS

SaveExploits0References2

CVE•added 2020/01/24 8:50 a.m.•156 views

CVE-2019-3692

CVE-2019-3692 affects the OpenSUSE/SUSE inn package and enables local privilege escalation from a normal user to root via symlink attacks. Affected packages/versions include SUSE Linux Enterprise Server 11 inn 2.4.2-170.21.3.1 and earlier; openSUSE Factory inn 2.6.2-2.2 and earlier; openSUSE Leap...

7.8CVSS7.5AI score0.005EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2020/01/24 8:50 a.m.•34 views

CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn

7.7CVSS7.6AI score0.005EPSS

SaveExploits1References3

CVE•added 2020/01/24 8:25 a.m.•149 views

CVE-2019-3687

CVE-2019-3687 affects the permissions package in SUSE/openSUSE SLE/OpenSUSE, allowing local users to run dumpcap with the easy permission profile and sniff network traffic. Affected range: permissions versions from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119...

4CVSS3.9AI score0.00275EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/01/24 8:25 a.m.•27 views

CVE-2019-3687 "easy" permission profile allows everyone execute dumpcap and read all network traffic

4CVSS4AI score0.00275EPSS

SaveExploits0References2

NVD•added 2020/01/23 4:15 p.m.•22 views

CVE-2019-3691

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

7.8CVSS7.5AI score0.00519EPSS

SaveExploits1References1

OSV•added 2020/01/23 4:15 p.m.•7 views

CVE-2019-3691

7.8CVSS7.1AI score0.00519EPSS

SaveExploits1References1

Cvelist•added 2020/01/23 4:00 p.m.•23 views

CVE-2019-3691 Local privilege escalation from user munge to root

7.7CVSS7.5AI score0.00519EPSS

SaveExploits1References1

CVE•added 2020/01/23 4:00 p.m.•125 views

CVE-2019-3691

CVE-2019-3691 is a local privilege escalation in the munge packaging for SUSE Linux Enterprise Server 15 and openSUSE Factory, caused by a Symbolic Link (Symlink) Following issue. Affected Munge versions are prior to 0.5.13-4.3.1 on SLES 15 and prior to 0.5.13-6.1 on openSUSE Factory. The vulnera...

7.8CVSS7.4AI score0.00519EPSS

SaveExploits1References1Affected Software1

OSV•added 2020/01/23 2:15 p.m.•4 views

CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

7.8CVSS7.1AI score0.00482EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by