Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:opensuse_tumbleweed:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductOpensuse Tumbleweed (92da724f-8c48-566e-a7e5-0c61908e325f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8026 vulnerable 2026-06-08 05:27:14.739587 inn: non-root owned files
HIGH (8.4)
A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.
Published: 2020-08-07T09:25:13.939Z
Updated: 2024-09-16T16:57:41.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8025 vulnerable 2026-06-08 05:27:14.734481 outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
MEDIUM (6.1)
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
Published: 2020-08-07T10:10:14.243Z
Updated: 2024-09-16T19:09:19.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8014 vulnerable 2026-06-08 05:27:14.652142 kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage
HIGH (7.7)
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.
Published: 2020-06-29T12:00:23.054Z
Updated: 2024-09-17T03:13:57.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.