Skip to content
OpenAdvisories

Archive

29 June 2020

Vulnerabilities first published on this day (UTC), newest first.

← May 2020 2020 / June /29 July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.0
    CVE-2020-4067

    Improper Initialization in coturn

    In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query …

    coturn coturn coturn coturn Debian Ubuntu Alpine
  • High 7.7
    CVE-2020-8014

    kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopan…

    openSUSE openSUSE Leap 15.1 openSUSE Tumbleweed
  • High 7.5
    CVE-2019-3681

    osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

    A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE F…

    SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Software Development Kit 12-SP5 Linux Debian Ubuntu
  • High 7.7
    CVE-2020-8019

    syslog-ng: Local privilege escalation from new to root in %post

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11…

    SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server 11-SP4-LTSS Linux
  • High 7.7
    CVE-2020-8022

    User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges

    A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-…

    SUSE SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 12-SP5 Linux