← Back

Opensuse

opensuse

3,271 CVEs • 50 products

Products (50)

Click to collapse
Toggle
Leap
leap
Opensuse
opensuse
Backports
backports
Evergreen
evergreen
Libsolv
libsolv
Factory
factory
Supportutils
supportutils
Libzypp
libzypp
Tumbleweed
tumbleweed
Zypper
zypper
Openldap2
openldap2
Osc
osc
Cryptctl
cryptctl
Munge
munge
Wicked
wicked
Pcp
pcp
Rmt Server
rmt-server
Cscreen
cscreen
Libeconf
libeconf
Libstorage
libstorage
Libstorage Ng
libstorage-ng
Sysconfig
sysconfig
Tar Scm
tar_scm
Package Hub
package_hub
Yast2 Printer
yast2-printer
Munin
munin
Autoyast2
autoyast2
Hylafax+
hylafax+
Cyrus Sasl
cyrus-sasl
Inn
inn
Canna
canna
Leap Micro
leap_micro
Paste
paste
Welcome
welcome
Mirrorcache
mirrorcache

CVEs (3,271)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
5Apple
DebianFedoraproject+2 more
10Backports Sle
ChromeDebian Linux+7 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Nov 21, 2024
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
4Debian
FedoraprojectOpensuse+1 more
4Debian Linux
FedoraLeap+1 more
Nov 21, 2024
Oct 29, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
4Debian
LinuxOpensuse+1 more
4Debian Linux
LeapLinux Kernel+1 more
Nov 21, 2024
Oct 22, 2020
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
4Debian
FedoraprojectOpensuse+1 more
4Debian Linux
FedoraLeap+1 more
Nov 21, 2024
Oct 22, 2020
N/A· v4
7.0 HIGH· v3
6.9 MEDIUM· v2
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-afte...Show more
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.Show less
4Debian
FedoraprojectOpensuse+1 more
4Debian Linux
FedoraLeap+1 more
Nov 21, 2024
Oct 22, 2020
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TL...Show more
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.Show less
4Debian
FedoraprojectOpensuse+1 more
4Debian Linux
FedoraLeap+1 more
Nov 21, 2024
Oct 22, 2020
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-u...Show more
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.Show less
3Debian
MozillaOpensuse
5Debian Linux
FirefoxFirefox Esr+2 more
Nov 21, 2024
Oct 22, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes...Show more
Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.Show less