Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2011-3177

The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Yast
Products
Yast2
CVE-2016-5746

libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.

CVSS 3.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Yast
Products
Leap Libstorage Libstorage-ng and 1 more