Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2024/04/19 2:18 a.m.•15 views

SUSE CVE-2024-26846

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between nvmedeletectrl and idadestroy has bee...

4.4CVSS6.6AI score0.00218EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/04/15 11:20 p.m.•15 views

SUSE CVE-2021-47194

In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup cfg80211stopap, this leads to t...

5.5CVSS7.5AI score0.00249EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/04/15 11:12 p.m.•15 views

SUSE CVE-2024-26798

In the Linux kernel, the following vulnerability has been resolved: fbcon: always restore the old font data in fbcondosetfont Commit a5a923038d70 fbdev: fbcon: Properly revert changes when vcresize failed started restoring old font data upon failure of vcresize. But it performs so only for user...

5.5CVSS6.2AI score0.00327EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/04/15 11:12 p.m.•15 views

SUSE CVE-2024-26812

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the...

4.4CVSS6.4AI score0.00248EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/04/10 2:16 a.m.•15 views

SUSE CVE-2024-26697

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper function nilfsrecoverycopyblock of nilfsrecoverydsyncblocks, which recovers data from logs created by data sync writes during a mount after an...

5.5CVSS6.5AI score0.00243EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2024/04/05 2:21 a.m.•15 views

SUSE CVE-2024-26659

In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes su...

5.5CVSS6.6AI score0.0024EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/03/27 4:26 a.m.•15 views

SUSE CVE-2021-47146

In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mldnewpack mldnewpack doesn't allow to allocate high order page, only order-0 allocation is allowed. If headroom size is too large, a kernel panic could occur in skbput. Test commands: ip netns del A ip netns de...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2024/03/07 4:25 a.m.•15 views

SUSE CVE-2023-52515

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsidone from srpabort After scmdehaborthandler has called the SCSI LLD ehaborthandler callback, it performs one of the following actions: Call scsiqueueinsert. Call scsifinishcommand. Call scsiehscmdadd...

5.5CVSS6.4AI score0.00613EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/03/06 4:34 a.m.•15 views

SUSE CVE-2023-52503

In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdteeclosesession There is a potential race condition in amdteeclosesession that may cause use-after-free in amdteeopensession. For instance, if a session has refcount == 1, and o...

4.5CVSS6.3AI score0.00258EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/03/05 4:49 a.m.•15 views

SUSE CVE-2021-47073

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dellsmbios initdellsmbioswmi only registers the dellsmbioswmidriver on systems where the Dell WMI interface is supported. While exitdellsmbioswmi unregisters it unconditionally, th...

5.5CVSS7.7AI score0.00241EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/03/01 4:8 a.m.•15 views

SUSE CVE-2021-46981

In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flushworkqueue Open /dev/nbdX first, the configrefs will be 1 and the pointers in nbddevice are still null. Disconnect /dev/nbdX, then reference a null recvworkq. The protection by configrefs in...

5.5CVSS7.7AI score0.0025EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/02/24 3:17 a.m.•15 views

SUSE CVE-2023-52443

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

5.5CVSS6.2AI score0.0024EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/02/11 3:54 a.m.•15 views

SUSE CVE-2024-24819

icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class gipfl\Web\Form is the base for various concrete form implementations 1 and provides protection against cross site request forgery CSRF by default. This is done by automatically...

8.8CVSS6.7AI score0.0026EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/01/13 2:50 a.m.•15 views

SUSE CVE-2022-48619

An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service panic because inputsetcapability mishandles the situation in which an event code falls outside of a bitmap...

6.2CVSS6.7AI score0.00213EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/08/18 2:12 a.m.•15 views

SUSE CVE-2023-4387

A use-after-free flaw was found in vmxnet3rqallocrxbuf in drivers/net/vmxnet3/vmxnet3drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3rqcleanupall, which could also lead to ...

6.6CVSS6AI score0.00245EPSS
SaveExploits0References30
SUSE CVE
SUSE CVE
•added 2023/08/01 1:29 a.m.•15 views

SUSE CVE-2023-4004

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nftpipaporemove function with the element, without a NFTSETEXTKEYEND. This issue could allow a local user to crash the system or potentially escalate their privileges on the system...

7.8CVSS6.3AI score0.00941EPSS
SaveExploits0References31
SUSE CVE
SUSE CVE
•added 2023/06/28 1:39 a.m.•15 views

SUSE CVE-2023-3422

Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.00658EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/05/05 2:0 a.m.•15 views

SUSE CVE-2023-2513

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors...

6.6CVSS6.3AI score0.00242EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2023/04/05 1:49 a.m.•15 views

SUSE CVE-2023-1821

Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

6.5CVSS8.6AI score0.00847EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 6:16 a.m.•15 views

SUSE CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

9.8CVSS7.4AI score0.02089EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:13 a.m.•15 views

SUSE CVE-2006-6737

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

4.3CVSS6.8AI score0.02385EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:7 a.m.•15 views

SUSE CVE-2008-4297

Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request...

5CVSS6.9AI score0.02695EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 6:0 a.m.•15 views

SUSE CVE-2010-0838

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Orac...

7.5CVSS8.5AI score0.149EPSS
SaveExploits9References12
SUSE CVE
SUSE CVE
•added 2023/02/15 5:57 a.m.•15 views

SUSE CVE-2010-3377

The 1 runSalome, 2 runTestMedCorba, 3 runLightSalome, and 4 hxx2salome scripts in SALOME 5.1.3 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

6.9CVSS7.1AI score0.00381EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:35 a.m.•15 views

SUSE CVE-2013-4472

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

3.3CVSS6.7AI score0.00367EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:32 a.m.•15 views

SUSE CVE-2014-0160

The 1 TLS and 2 DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys,...

7.5CVSS6.8AI score0.99999EPSS
SaveExploits91References32
SUSE CVE
SUSE CVE
•added 2023/02/15 5:26 a.m.•15 views

SUSE CVE-2014-7169

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the...

9.8CVSS7.8AI score0.9994EPSS
SaveExploits31References41
SUSE CVE
SUSE CVE
•added 2023/02/15 5:17 a.m.•15 views

SUSE CVE-2015-4863

Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

10CVSS7.9AI score0.03092EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:6 a.m.•15 views

SUSE CVE-2016-2097

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. dot dot in a pathname. NOTE: this vulnerability exists...

5.3CVSS6.3AI score0.04423EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:59 a.m.•15 views

SUSE CVE-2016-6664

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

7.8CVSS9AI score0.0308EPSS
SaveExploits10References14
SUSE CVE
SUSE CVE
•added 2023/02/15 4:59 a.m.•15 views

SUSE CVE-2016-6816

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a...

7.1CVSS6.3AI score0.39633EPSS
SaveExploits6References12
SUSE CVE
SUSE CVE
•added 2023/02/15 4:40 a.m.•15 views

SUSE CVE-2017-13086

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Tunneled Direct-Link Setup TDLS Peer Key TPK during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

8.1CVSS6.9AI score0.02046EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 4:35 a.m.•15 views

SUSE CVE-2017-18595

An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c...

4.4CVSS6.2AI score0.0035EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2023/02/15 4:29 a.m.•15 views

SUSE CVE-2018-7489

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of th...

9.8CVSS8.3AI score0.19781EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 4:14 a.m.•15 views

SUSE CVE-2019-9503

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...

4.7CVSS7.5AI score0.03251EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2023/02/15 4:11 a.m.•15 views

SUSE CVE-2019-12382

An issue was discovered in drmloadedidfirmware in drivers/gpu/drm/drmedidload.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: The vendor disputes this issues as...

2.5CVSS6.5AI score0.00464EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2023/02/15 4:11 a.m.•15 views

SUSE CVE-2019-12381

An issue was discovered in ipracontrol in net/ipv4/ipsockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of newra, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: this is disputed because newra is never used if it...

5.5CVSS6.5AI score0.00444EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:8 a.m.•15 views

SUSE CVE-2019-15927

An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function buildaudioprocunit in the file sound/usb/mixer.c...

4.9CVSS7.6AI score0.00412EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2023/02/15 4:6 a.m.•15 views

SUSE CVE-2019-19037

ext4emptydir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4readdirblockinode,0,DIRENTHTREE can be zero...

5.5CVSS7.9AI score0.01886EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:6 a.m.•15 views

SUSE CVE-2019-19529

In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcbausb.c driver, aka CID-4d6636498c41...

4.6CVSS7.8AI score0.00445EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2023/02/15 3:54 a.m.•15 views

SUSE CVE-2020-25220

The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd-norefcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature...

7.8CVSS6.9AI score0.00449EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:48 a.m.•15 views

SUSE CVE-2021-3653

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "intctl" field, this issue could allow a malicious ...

7.8CVSS8.6AI score0.00444EPSS
SaveExploits1References38
SUSE CVE
SUSE CVE
•added 2023/02/15 3:48 a.m.•15 views

SUSE CVE-2021-3732

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible...

3.3CVSS6.3AI score0.00334EPSS
SaveExploits0References33
SUSE CVE
SUSE CVE
•added 2023/02/15 3:47 a.m.•15 views

SUSE CVE-2021-4104

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...

6.4CVSS8.6AI score0.81147EPSS
SaveExploits9References24
SUSE CVE
SUSE CVE
•added 2023/02/15 3:47 a.m.•15 views

SUSE CVE-2021-4157

An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication of files with NFS. A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system...

3.4CVSS6.8AI score0.01584EPSS
SaveExploits0References33
SUSE CVE
SUSE CVE
•added 2023/02/15 3:44 a.m.•15 views

SUSE CVE-2021-26930

An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later...

7.8CVSS6.6AI score0.00348EPSS
SaveExploits0References26
SUSE CVE
SUSE CVE
•added 2023/02/15 3:43 a.m.•15 views

SUSE CVE-2021-28952

An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. This has been fixed in 5.12-rc4...

7.8CVSS6.8AI score0.00378EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 3:42 a.m.•15 views

SUSE CVE-2021-29646

An issue was discovered in the Linux kernel before 5.11.11. tipcnlretrievekey in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8...

5.5CVSS6.4AI score0.0031EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:36 a.m.•15 views

SUSE CVE-2021-45868

In the Linux kernel before 5.15.3, fs/quota/quotatree.c does not validate the block number in the quota tree on disk. This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file...

5.1CVSS6.5AI score0.01339EPSS
SaveExploits1References26
SUSE CVE
SUSE CVE
•added 2023/02/15 3:34 a.m.•15 views

SUSE CVE-2022-0850

A vulnerability was found in linux kernel, where an information leak occurs via ext4extentheader to userspace...

4.4CVSS6.6AI score0.00417EPSS
SaveExploits1References25
Total number of security vulnerabilities5000