Package Hub (Suse) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-08-19. Vendor: Suse.

CVEs of Package Hub

CVE-2020-24368 - CVSS 7.5 (high), 2020-08-19: Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are…
CVE-2020-10803 - CVSS 5.4 (medium), 2020-03-22: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack…
CVE-2020-10802 - CVSS 8 (high), 2020-03-22: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when…
CVE-2020-10804 - CVSS 8 (high), 2020-03-22: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in…
CVE-2020-6416 - CVSS 8.8 (high), 2020-02-11: Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted…
CVE-2020-6415 - CVSS 8.8 (high), 2020-02-11: Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a…
CVE-2020-6398 - CVSS 8.8 (high), 2020-02-11: Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF…
CVE-2020-6403 - CVSS 4.3 (medium), 2020-02-11: Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via…
CVE-2020-6408 - CVSS 6.5 (medium), 2020-02-11: Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a…
CVE-2020-6397 - CVSS 6.5 (medium), 2020-02-11: Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2020-6402 - CVSS 8.8 (high), 2020-02-11: Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious…
CVE-2020-6406 - CVSS 8.8 (high), 2020-02-11: Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6396 - CVSS 4.3 (medium), 2020-02-11: Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a…
CVE-2020-6400 - CVSS 6.5 (medium), 2020-02-11: Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2020-6404 - CVSS 8.8 (high), 2020-02-11: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted…
CVE-2020-6381 - CVSS 8.8 (high), 2020-02-11: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption…
CVE-2020-6390 - CVSS 8.8 (high), 2020-02-11: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted…
CVE-2020-6393 - CVSS 6.5 (medium), 2020-02-11: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2020-6385 - CVSS 8.8 (high), 2020-02-11: Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.
CVE-2020-6392 - CVSS 4.3 (medium), 2020-02-11: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension…
CVE-2020-6382 - CVSS 8.8 (high), 2020-02-11: Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6391 - CVSS 4.3 (medium), 2020-02-11: Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a…
CVE-2020-6394 - CVSS 5.4 (medium), 2020-02-11: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML…
CVE-2019-15623 - CVSS 5.3 (medium), 2020-02-04: Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any…
CVE-2020-7106 - CVSS 6.1 (medium), 2020-01-16: Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and…
CVE-2019-19925 - CVSS 7.5 (high), 2019-12-24: zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
CVE-2019-19923 - CVSS 7.5 (high), 2019-12-24: flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can…
CVE-2019-19926 - CVSS 7.5 (high), 2019-12-23: multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this…
CVE-2019-19880 - CVSS 7.5 (high), 2019-12-18: exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses…
CVE-2019-13764 - CVSS 8.8 (high), 2019-12-10: Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-13745 - CVSS 6.5 (medium), 2019-12-10: Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2019-13734 - CVSS 8.8 (high), 2019-12-10: Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-11730 - CVSS 6.5 (medium), 2019-07-23: A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or…
CVE-2019-11709 - CVSS 9.8 (critical), 2019-07-23: Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory…
CVE-2019-5798 - CVSS 6.5 (medium), 2019-05-23: Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted…
CVE-2018-16876 - CVSS 5.3 (medium), 2019-01-03: ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible…
CVE-2018-16837 - CVSS 7.8 (high), 2018-10-23: Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases…
CVE-2018-10875 - CVSS 7.8 (high), 2018-07-13: A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under…
CVE-2016-1646 - CVSS 8.8 (high), 2016-03-29: The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data…