# openSUSE Leap 15.1. Every CVE that names openSUSE Leap 15.1 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [openldap uses fixed paths in /tmp](https://agentprime.io/advisories/CVE-2020-8027.md) `CVE-2020-8027` · CVE record: SUSE SUSE Linux Enterprise Server 15-LTSS and 3 more · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2021 · Tags: CWE-377 - [Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2](https://agentprime.io/advisories/CVE-2020-8023.md) `CVE-2020-8023` · CVE record: SUSE SUSE Enterprise Storage 5 and 4 more · CVSS 7.7 High · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-349 - [outdated entries in permissions profiles for /var/lib/pcp/tmp/\* may cause security issues](https://agentprime.io/advisories/CVE-2020-8025.md) `CVE-2020-8025` · CVE record: SUSE SUSE Linux Enterprise Server 12-SP4 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 7 Aug 2020 · Tags: CWE-279 - [inn: non-root owned files](https://agentprime.io/advisories/CVE-2020-8026.md) `CVE-2020-8026` · CVE record: openSUSE openSUSE Leap 15.2 and 2 more · CVSS 8.4 High · Not analysed yet · Published 7 Aug 2020 · Tags: Broken access control - [kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage](https://agentprime.io/advisories/CVE-2020-8014.md) `CVE-2020-8014` · CVE record: openSUSE openSUSE Leap 15.1 and 1 more · CVSS 7.7 High · Not analysed yet · Published 29 Jun 2020 · Tags: CWE-61 - [osc: stores downloaded (supposed) RPM in network-controlled filesystem paths](https://agentprime.io/advisories/CVE-2019-3681.md) `CVE-2019-3681` · CVE record: SUSE SUSE Linux Enterprise Module for Development Tools 15 and 4 more · CVSS 7.5 High · Not analysed yet · Published 29 Jun 2020 · Tags: Path traversal - [syslog-ng: Local privilege escalation from new to root in %post](https://agentprime.io/advisories/CVE-2020-8019.md) `CVE-2020-8019` · CVE record: SUSE SUSE Linux Enterprise Debuginfo 11-SP3 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 Jun 2020 · Tags: CWE-61 - [Problematic permissions in hylafax+ packaging allow escalation from uucp to other users](https://agentprime.io/advisories/CVE-2020-8024.md) `CVE-2020-8024` · CVE record: openSUSE openSUSE Leap 15.2 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2020 · Tags: Broken access control - [Migrations requests can cause DoS on rmt](https://agentprime.io/advisories/CVE-2019-18904.md) `CVE-2019-18904` · CVE record: SUSE SUSE Linux Enterprise High Performance Computing 15-ESPOS and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2020 · Tags: Denial of service - [race condition on texlive-filesystem cron job allows for the deletion of unintended files](https://agentprime.io/advisories/CVE-2020-8017.md) `CVE-2020-8017` · CVE record: SUSE SUSE Linux Enterprise Module for Desktop Applications 15-SP1 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: Race condition - [race condition in the packaging of texlive-filesysten](https://agentprime.io/advisories/CVE-2020-8016.md) `CVE-2020-8016` · CVE record: SUSE SUSE Linux Enterprise Module for Desktop Applications 15-SP1 and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 2 Apr 2020 · Tags: Race condition - [pcp: Local privilege escalation from user pcp to root through migrate_tempdirs](https://agentprime.io/advisories/CVE-2019-3696.md) `CVE-2019-3696` · CVE record: SUSE SUSE Linux Enterprise High Performance Computing 15-ESPOS and 4 more · CVSS 8.4 High · Not analysed yet · Published 3 Mar 2020 · Tags: Path traversal - [pcp: Local privilege escalation from user pcp to root](https://agentprime.io/advisories/CVE-2019-3695.md) `CVE-2019-3695` · CVE record: SUSE SUSE Linux Enterprise High Performance Computing 15-ESPOS and 4 more · CVSS 8.4 High · Not analysed yet · Published 3 Mar 2020 · Tags: Code injection - [wicked: Use-after-free when receiving invalid DHCP6 IA_PD option](https://agentprime.io/advisories/CVE-2019-18903.md) `CVE-2019-18903` · CVE record: SUSE SUSE Linux Enterprise Server 12 and 3 more · CVSS 7.5 High · Not analysed yet · Published 2 Mar 2020 · Tags: Memory corruption - [wicked: Use-after-free when receiving invalid DHCP6 client options](https://agentprime.io/advisories/CVE-2019-18902.md) `CVE-2019-18902` · CVE record: SUSE SUSE Linux Enterprise Server 12 and 3 more · CVSS 7.5 High · Not analysed yet · Published 2 Mar 2020 · Tags: Memory corruption - [Local privilege escalation from user privoxy to root](https://agentprime.io/advisories/CVE-2019-3699.md) `CVE-2019-3699` · CVE record: openSUSE Leap 15.1 and 1 more · CVSS 7.7 High · Not analysed yet · Published 24 Jan 2020 · Tags: Path traversal - [Local privilege escalation from user gnump3d to root](https://agentprime.io/advisories/CVE-2019-3697.md) `CVE-2019-3697` · CVE record: openSUSE Leap 15.1 · CVSS 7.7 High · Not analysed yet · Published 24 Jan 2020 · Tags: Path traversal - [Local privilege escalation from munin to root in the packaging of munin](https://agentprime.io/advisories/CVE-2019-3694.md) `CVE-2019-3694` · CVE record: openSUSE Factory and 1 more · CVSS 7.7 High · Not analysed yet · Published 24 Jan 2020 · Tags: Path traversal - [Local privilege escalation from user wwwrun to root in the packaging of mailman](https://agentprime.io/advisories/CVE-2019-3693.md) `CVE-2019-3693` · CVE record: SUSE SUSE Linux Enterprise Server 11 and 2 more · CVSS 7.7 High · Not analysed yet · Published 24 Jan 2020 · Tags: Path traversal - [Local privilege escalation from user news to root in the packaging of inn](https://agentprime.io/advisories/CVE-2019-3692.md) `CVE-2019-3692` · CVE record: SUSE SUSE Linux Enterprise Server 11 and 2 more · CVSS 7.7 High · Not analysed yet · Published 24 Jan 2020 · Tags: Path traversal - [apt-cacher-ng insecure use of /run/apt-cacher-ng](https://agentprime.io/advisories/CVE-2019-18899.md) `CVE-2019-18899` · CVE record: openSUSE Leap 15.1 · CVSS 6.2 Medium · Not analysed yet · Published 23 Jan 2020 · Tags: Privilege escalation ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .