Opensuse

Leap

1897 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-12528

  • EPSS 20.52%
  • Published 04.02.2020 21:15:10
  • Last modified 21.11.2024 04:23:02

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.

7.5

CVE-2020-8449

  • EPSS 3.29%
  • Published 04.02.2020 20:15:14
  • Last modified 21.11.2024 05:38:52

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

7.5

CVE-2020-8450

  • EPSS 43.09%
  • Published 04.02.2020 20:15:14
  • Last modified 21.11.2024 05:38:52

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.

7.5

CVE-2020-8517

  • EPSS 0.83%
  • Published 04.02.2020 20:15:14
  • Last modified 21.11.2024 05:38:59

An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On systems with memory access protections, this can re...

6.5

CVE-2019-20446

  • EPSS 0.97%
  • Published 02.02.2020 14:15:10
  • Last modified 21.11.2024 04:38:30

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows expon...

7.1

CVE-2020-8492

Exploit
  • EPSS 3.25%
  • Published 30.01.2020 19:15:12
  • Last modified 21.11.2024 05:38:56

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicA...

10

CVE-2020-8432

  • EPSS 1.21%
  • Published 29.01.2020 19:15:14
  • Last modified 21.11.2024 05:38:50

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introd...

5.5

CVE-2020-0549

  • EPSS 0.12%
  • Published 28.01.2020 01:15:12
  • Last modified 21.11.2024 04:53:43

Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

5.5

CVE-2018-20105

  • EPSS 0.14%
  • Published 27.01.2020 09:15:11
  • Last modified 21.11.2024 04:00:53

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Ser...

3.6

CVE-2019-1348

  • EPSS 0.04%
  • Published 24.01.2020 22:15:19
  • Last modified 21.11.2024 04:36:31

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... an...