Vulnerabilities

TI-2024-11208 CVE-2024-12084 · GHSA-85h7-m8c3-v9wc

Rsync: heap buffer overflow in rsync due to improper checksum length handling

CRITICAL 87

A heap-based buffer overflow flaw was found in the rsync daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72514 Published 2025-01-15 Fixed in 3.4.1-2.el10 CWE-122

TI-2024-11212 CVE-2024-12088 · GHSA-ffph-g3pc-8r3g

Rsync: --safe-links option bypass leads to path traversal

HIGH 66

A flaw was found in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04646 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22

TI-2015-02256 CVE-2015-2567 · GHSA-q2xm-j8qr-28r7

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02479 Published 2015-04-16 No fix listed

TI-2015-02255 CVE-2015-2566 · GHSA-gc82-5wf6-rgrq

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote…

LOW 19

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.02617 Published 2015-04-16 No fix listed

TI-2013-04258 CVE-2013-4854 · GHSA-pm36-8qh4-c679

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2…

MEDIUM 59

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.3415 Published 2013-07-26 Fixed

TI-2011-00849 CVE-2011-0988 · GHSA-fcmr-8hmm-9f43

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise…

LOW 20

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overw…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00344 Published 2011-04-18 No fix listed CWE-264

TI-2010-03717 CVE-2010-3912 · GHSA-p7c2-7f6q-f6m2

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does…

MEDIUM 47

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.021 Published 2011-01-12 No fix listed CWE-255

TI-2010-02972 CVE-2010-3110 · GHSA-6gpx-44mf-5m57

Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE…

LOW 32

Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00377 Published 2010-10-12 No fix listed CWE-119

TI-2010-01456 CVE-2010-1507 · GHSA-qq64-jrrc-67ww

WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance…

LOW 27

WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveragin…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02121 Published 2010-09-03 No fix listed CWE-255

TI-2009-01232 CVE-2009-1297 · GHSA-ph28-8h48-j3qp

iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux…

LOW 20

iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unsp…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00337 Published 2009-10-23 No fix listed CWE-59

TI-2007-04292 CVE-2007-4432 · GHSA-cjq5-93qv-57v9

Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2)…

LOW 21

Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00372 Published 2007-08-20 No fix listed

TI-2007-04254 CVE-2007-4394 · GHSA-xh3h-phv3-vx63

Unspecified vulnerability in a "core clean" cron job created by the findutils-locate…

LOW 11

Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00355 Published 2007-08-17 No fix listed

TI-2007-01243 CVE-2007-1285 · GHSA-jhxw-fqxp-j75j

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to…

MEDIUM 51

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1883 Published 2007-03-06 Fixed CWE-674

TI-2005-04521 CVE-2005-4791 · GHSA-53f4-27hf-367h

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working…

LOW 12

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00454 Published 2006-04-26 No fix listed

TI-2005-04520 CVE-2005-4790 · GHSA-xg82-h5j4-q6gx

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly…

LOW 31

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00492 Published 2006-04-26 No fix listed

TI-2006-00781 CVE-2006-0803 · GHSA-5fg2-37rc-xj2q

The signature verification functionality in the YaST Online Update (YOU) script handling…

LOW 26

The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or cod…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01778 Published 2006-02-23 No fix listed

TI-2005-03146 CVE-2005-3321 · GHSA-cr2w-jqc8-qg2m

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files…

LOW 21

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is dele…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00401 Published 2005-10-27 No fix listed

Vulnerabilities

Filters