CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

243 matches found

Cvelist•added 2020/04/02 7:55 a.m.•58 views

CVE-2020-8015 Local privilege escalation in exim package from user mail to root

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

8.4CVSS7.8AI score0.00528EPSS

SaveExploits1References2

CVE•added 2020/04/02 7:55 a.m.•665 views

CVE-2020-8015

CVE-2020-8015 is a local privilege-escalation in Exim packaging affecting openSUSE Factory exim versions prior to 4.93.0.4-3.1. The issue allows escalation from the mail user to root via a UNIX symbolic link (Symlink) following vulnerability. Remediation is to upgrade to Exim 4.93.0.4 or newer; S...

8.4CVSS7.7AI score0.00528EPSS

SaveExploits1References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/04/02 12:00 a.m.•3 views

CVE-2020-8015: Improper Link Resolution Before File Access

8.4CVSS7.7AI score0.00528EPSS

SaveExploits1References3

attackerkb•added 2020/04/02 12:00 a.m.•6 views

CVE-2020-8015

8.4CVSS8.1AI score0.00528EPSS

SaveExploits1References3

Positive Technologies•added 2020/04/02 12:00 a.m.•2 views

PT-2020-19919

Name of the Vulnerable Software and Affected Versions openSUSE Factory exim versions prior to 4.93.0.4-3.1 Description A UNIX Symbolic Link Symlink Following issue in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. Recommendations For openSUSE...

8.4CVSS0.0094EPSS

SaveExploits2References50

OSV•added 2020/03/02 5:15 p.m.•8 views

CVE-2019-18903

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1...

9.8CVSS7.4AI score0.02416EPSS

SaveExploits0References1

OSV•added 2020/03/02 5:15 p.m.•5 views

CVE-2019-18902

9.8CVSS7.4AI score0.02416EPSS

SaveExploits0References1

Cvelist•added 2020/03/02 4:45 p.m.•41 views

CVE-2019-18902 wicked: Use-after-free when receiving invalid DHCP6 client options

7.5CVSS9.5AI score0.02416EPSS

SaveExploits0References1

NVD•added 2020/03/02 4:15 p.m.•41 views

CVE-2019-18897

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master...

8.4CVSS8.2AI score0.00386EPSS

SaveExploits0References2

UbuntuCve•added 2020/03/02 4:15 p.m.•25 views

CVE-2019-18897

8.4CVSS7.1AI score0.00386EPSS

SaveExploits0References2

Cvelist•added 2020/03/02 3:20 p.m.•51 views

CVE-2019-18897 Local privilege escalation from user salt to root

8.4CVSS8.9AI score0.00386EPSS

SaveExploits0References2

CVE•added 2020/03/02 3:20 p.m.•180 views

CVE-2019-18897

CVE-2019-18897 is a local privilege escalation in Salt packaging on SUSE/OpenSUSE derivatives (SUSE SLES 12/15 and openSUSE Factory) due to a UNIX Symlink Following vulnerability in salt-master packaging. Affected: SUSE SLES 12 salt-master 2019.2.0-46.83.1 and prior; SLES 15 salt-master 2019.2.0-...

8.4CVSS7.7AI score0.00386EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•3 views

CVE-2019-18897: Improper Link Resolution Before File Access

8.4CVSS7.7AI score0.00386EPSS

SaveExploits0References3

OSV•added 2020/02/28 2:15 p.m.•30 views

CVE-2019-3698

UNIX Symbolic Link Symlink Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linu...

7CVSS6.7AI score

SaveExploits0References3

NVD•added 2020/02/28 2:15 p.m.•34 views

CVE-2019-3698

7CVSS6AI score0.00684EPSS

SaveExploits1References3

Prion•added 2020/02/28 2:15 p.m.•25 views

Sql injection

6.9CVSS6.8AI score0.00684EPSS

SaveExploits1References3Affected Software3

CVE•added 2020/02/28 1:20 p.m.•181 views

CVE-2019-3698

CVE-2019-3698 is a local Symlink Following vulnerability in the cronjob used by Nagios on SUSE/OpenSUSE products. Affected: SUSE Linux Enterprise Server 12 Nagios 3.5.1-5.27 and earlier, SLES 11 Nagios 3.0.6-1.25.36.3.1 and earlier, and openSUSE Factory Nagios 4.4.5-2.1 and earlier. Root cause is...

7CVSS6.6AI score0.00684EPSS

SaveExploits1References3Affected Software1

RedhatCVE•added 2020/02/14 4:44 p.m.•36 views

CVE-2019-3699

UNIX Symbolic Link Symlink Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version...

7.8CVSS4.2AI score0.00409EPSS

SaveExploits0References3

OSV•added 2020/01/27 9:15 a.m.•14 views

CVE-2018-12476

Relative Path Traversal vulnerability in obs-service-tarscm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise...

7.5CVSS5.8AI score0.01026EPSS

SaveExploits0References1

NVD•added 2020/01/27 9:15 a.m.•40 views

CVE-2018-12476

7.5CVSS5.7AI score0.01026EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by