opensuse leap güvenlik açıkları (CVE)

7.8Yüksek

CVE-2026-31431 KEV 6 ay önce

crypto: algif_aead - Revert to operating out-of-place

Linux Linux; Siemens SIMATIC AX Runtime Core Linux Common Debian; Siemens SIMATIC AX Runtime Core Linux Common Debian arm64; Siemens SIMATIC AX Runtime Core Linux Platform Container Common Debian Development

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in al…

98%EPSS

9.3Kritik

CVE-2025-32463 KEV 1 yıl önce

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Sudo project Sudo

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

56%EPSS

9.8Kritik

CVE-2020-16846 KEV 6 yıl önce

SaltStack Salt Shell Injection Vulnerability

saltstack salt; debian debian linux; fedoraproject fedora; opensuse leap

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

100%EPSS

8.8Yüksek

CVE-2020-16009 KEV 6 yıl önce

Google Chromium V8 Type Confusion Vulnerability

Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

48%EPSS

5.5Orta

CVE-2020-1472 KEV Fidye yazılımında kullanılıyor 6 yıl önce

Netlogon Elevation of Privilege Vulnerability

Microsoft Windows Server version 2004; Microsoft Windows Server 2019; Microsoft Windows Server 2019 (Server Core installation); Microsoft Windows Server, version 1909 (Server Core installation)

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

99%EPSS

9.8Kritik

CVE-2020-12641 KEV 6 yıl önce

Roundcube Webmail Remote Code Execution Vulnerability

roundcube webmail; opensuse backports sle; opensuse leap

rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

84%EPSS

6.5Orta

CVE-2020-11652 KEV 6 yıl önce

SaltStack Salt Path Traversal Vulnerability

saltstack salt; opensuse leap; debian debian linux; canonical ubuntu linux

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

86%EPSS

9.8Kritik

CVE-2020-11651 KEV 6 yıl önce

SaltStack Salt Authentication Bypass Vulnerability

saltstack salt; opensuse leap; debian debian linux; canonical ubuntu linux

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be u…

97%EPSS

6.9Orta

CVE-2020-11022 6 yıl önce

jQuery has a potential XSS vulnerability

jquery jQuery

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

99%EPSS

9.8Kritik

CVE-2020-1938 KEV 6 yıl önce

Apache Tomcat Improper Privilege Management Vulnerability

Apache Apache Tomcat

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

99%EPSS

8.8Yüksek

CVE-2019-13720 KEV 6 yıl önce

Google Chrome WebAudio Use-After-Free Vulnerability

Google Chrome

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

49%EPSS

7.8Yüksek

CVE-2019-0211 KEV 7 yıl önce

Apache HTTP Server Privilege Escalation Vulnerability

Apache Apache HTTP Server

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the priv…

65%EPSS

7.5Yüksek

CVE-2019-5418 KEV 7 yıl önce

Rails Ruby on Rails Path Traversal Vulnerability

Rails https://github.com/rails/rails

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

99%EPSS

5.5Orta

CVE-2016-3718 KEV 10 yıl önce

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

76%EPSS

5.5Orta

CVE-2016-3715 KEV 10 yıl önce

ImageMagick Arbitrary File Deletion Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

75%EPSS

8.4Yüksek

CVE-2016-3714 KEV 10 yıl önce

ImageMagick Improper Input Validation Vulnerability

imagemagick imagemagick; canonical ubuntu_linux; debian debian_linux; opensuse opensuse

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

97%EPSS

9.8Kritik

CVE-2016-3427 KEV 10 yıl önce

Oracle Java SE and JRockit Unspecified Vulnerability

oracle jdk; oracle jre; oracle jrockit; oracle linux

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

92%EPSS

8.8Yüksek

CVE-2016-1646 KEV 10 yıl önce

Google Chromium V8 Out-of-Bounds Read Vulnerability

debian debian linux; canonical ubuntu linux; google chrome; suse package hub

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly ha…

48%EPSS

7.5Yüksek

CVE-2016-0752 KEV 10 yıl önce

Ruby on Rails Directory Traversal Vulnerability

rubyonrails rails; opensuse leap; opensuse opensuse; suse linux enterprise module for containers

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted …

96%EPSS

5.3Orta

CVE-2015-4902 KEV 11 yıl önce

Oracle Java SE Integrity Check Vulnerability

oracle jdk; oracle jre; redhat satellite; redhat enterprise linux desktop

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

14%EPSS