Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-12476obs-service-extract_file's outfilename parameter allows to write files outside of package directory
- CVE-2019-18900libzypp stores cookies world readable
- CVE-2019-3693Local privilege escalation from user wwwrun to root in the packaging of mailman
- CVE-2019-3692Local privilege escalation from user news to root in the packaging of inn
- CVE-2019-3687"easy" permission profile allows everyone execute dumpcap and read all network traffic
- CVE-2019-3691Local privilege escalation from user munge to root
- CVE-2019-18898trousers: Local privilege escalation from tss to root
- CVE-2019-3686XSS in distri and version parameter in openQA
- CVE-2019-3683keystone_json_assignment backend granted access to any project for users in user-project-map.json
- CVE-2019-3682Insecure API port exposed to all Master Node guest containers
- CVE-2019-3690chkstat follows untrusted symbolic links
- CVE-2019-10220Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
- CVE-2019-3688squid: /usr/sbin/pinger packaged with wrong permission
- CVE-2019-3689nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
- CVE-2019-3684susemanager installer creates world-readable swap files
- CVE-2018-20106SMB printer settings don't escape characters in passwords properly
- CVE-2018-17956Password exposed in process listing
- CVE-2018-17955Static tempfile name allows overwriting of arbitrary files
- CVE-2018-19640Code execution if run with command line switch -v
- CVE-2018-19639Code execution if run with command line switch -v
- CVE-2018-19638User can overwrite arbitrary log files in support tar
- CVE-2018-19637Static temporary filename allows overwriting of files
- CVE-2018-19636Local root exploit via inclusion of attacker controlled shell script
- CVE-2018-17957yast2-rmt leaks database passwords in process list
- CVE-2018-17953pam_access does not handle netmask matches correctly
- CVE-2018-7685libzypp does not reevaluate malicious rpms once downloaded
- CVE-2011-4183open build service allows anyone to upload rpms
- CVE-2011-4181open build service information leak via unauthorized source access
- CVE-2012-0433insecure permissions on files containing confidential data
- CVE-2011-4190Missing verification of host key for kdump server