Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

81 records

Vendor: SUSE Component: Suse Linux Enterprise Desktop Clear all filters
TI-2023-15484 CVE-2023-32182 · GHSA-wcv5-982f-xggc

Link following in SUSE Linux Enterprise Desktop 15 SP5

Priority LOW 34

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Lea…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00301 Published 2023-09-19 Fixed in 3.7.3-150500.3.5.1 CWE-59
TI-2020-05279 CVE-2020-6429 · GHSA-pvv4-xcgc-r7xw

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02314 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-787
TI-2020-05278 CVE-2020-6428 · GHSA-fpmw-jmcv-qqq3

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02314 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-787
TI-2020-05277 CVE-2020-6427 · GHSA-fq96-gw4p-qfvc

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02446 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-787
TI-2020-05276 CVE-2020-6426 · GHSA-8279-779r-h75h

Out-of-bounds write in Google Chrome

Priority LOW 34

Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02861 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-787
TI-2020-05274 CVE-2020-6424 · GHSA-7w79-mx3m-6r57

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03498 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-416
TI-2020-05272 CVE-2020-6422 · GHSA-67qx-cpp8-84mr

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02354 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-787
TI-2020-05299 CVE-2020-6449 · GHSA-9q52-m6p9-h4qp

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02664 Published 2020-03-20 Fixed in 80.0.3987.149 CWE-416
TI-2018-13934 CVE-2018-19655 · GHSA-86c2-8h98-4wr6

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used…

Priority MEDIUM 43

A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecif…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02855 Published 2018-11-29 Fix deferred CWE-787
TI-2011-03691 CVE-2011-4190 · GHSA-cp9h-xhgc-8r95

Missing verification of host key for kdump server

Priority LOW 28

The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00779 Published 2018-06-08 Fixed in 2012-01-20 CWE-306
TI-2017-03716 CVE-2017-5753

Observable discrepancy in Intel Most Modern Operating Systems

Priority HIGH 69

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.93838 Published 2018-01-04 Fixed CWE-203
TI-2015-02952 CVE-2015-3340 · GHSA-32p3-vxg7-c4m2

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote…

Priority LOW 16

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist requ…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00793 Published 2015-04-28 No fix listed CWE-200
Load more