Browse CVEs

HIGH 8.8 CVE-2026-44941 A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a maliciou… Libzypp 17.38.12+ Fix from $1,9502026-07-02 HIGH 8.8 CVE-2026-25707 A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repo… Libzypp 17.38.10+ Fix from $1,9502026-06-29 MEDIUM 6.1 CVE-2024-49505 A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the ex… Mirrorcache 1.083+ Fix from $1,6002024-11-13 HIGH 7.8 CVE-2023-32182 A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux … Leap No fix yet Fix from $1,9502023-09-19 HIGH 7.8 CVE-2023-32184 A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs o… Welcome 0.1.9+ Fix from $1,9502023-09-19 HIGH 7.8 CVE-2023-32183 Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root Th… Tumbleweed No fix yet Fix from $1,9502023-07-07 MEDIUM 6.5 CVE-2023-22652 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. … Libeconf 0.5.2+ Fix from $1,6002023-06-01 MEDIUM 6.5 CVE-2023-32181 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuratio… Libeconf 0.5.2+ Fix from $1,6002023-06-01 MEDIUM 5.5 CVE-2022-45154 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE… Supportutils after 3.1.21-150300.7.35.15.1 Fix from $1,6002023-02-15 MEDIUM 6.1 CVE-2022-21948 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javas… Paste 2011-12-05+ Fix from $1,6002023-02-07 HIGH 7.8 CVE-2022-31254 A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Serv… Rmt Server 2.10+ Fix from $1,9502023-02-07 HIGH 7.8 CVE-2023-22643 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux E… Libzypp Plugin Appdata 1.0.1+ Fix from $1,9502023-02-07 HIGH 7.5 CVE-2022-46163 Travel support program is a rails app to support the travel support program of openSUSE (TSP). Sensitive user data (bank account details, password Ha… Travel Support Program 2022-11-29+ Fix from $1,9502023-01-10 HIGH 7.8 CVE-2022-31253 A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change owners… Openldap2 2.6.3-404.1+ Fix from $1,9502022-11-09 HIGH 7.8 CVE-2022-31256 A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory… Factory 8.17.1-1.1+ Fix from $1,9502022-10-26 MEDIUM 6.3 CVE-2022-31251 A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over th… Factory 22.05.2-3.3+ Fix from $1,6002022-09-07 MEDIUM 5.3 CVE-2022-21950 A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local u… Canna 3.7p3-bp153.2.3.1 / 3.7p3-bp154.3.3.1+ Fix from $1,6002022-09-07 HIGH 7.8 CVE-2022-31250 A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to … Tumbleweed 6.4.2-1.1+ Fix from $1,9502022-07-20 HIGH 8.8 CVE-2022-21949 A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entiti… Open Build Service 2.10.13+ Fix from $1,9502022-05-03 MEDIUM 6.1 CVE-2022-21945 A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-defau… Cscreen after 1.3 Fix from $1,6002022-03-16 MEDIUM 5.3 CVE-2022-21946 A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local us… Cscreen after 1.3 Fix from $1,6002022-03-16 HIGH 8.8 CVE-2021-36777 A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present use… Open Build Service 2021-10-08+ Fix from $1,9502022-03-09 MEDIUM 6.5 CVE-2021-44568 Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies func… Libsolv 0.7.17+ Fix from $1,6002022-02-21 HIGH 7.8 CVE-2022-21944 A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows loca… Factory Watchman after 4.9.1 Fix from $1,9502022-01-26 HIGH 7.5 CVE-2021-33928 Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. Libsolv after 0.7.17 Fix from $1,9502021-09-02 HIGH 7.5 CVE-2021-33929 Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. Libsolv after 0.7.17 Fix from $1,9502021-09-02 HIGH 7.5 CVE-2021-33930 Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of … Libsolv after 0.7.17 Fix from $1,9502021-09-02 HIGH 7.5 CVE-2021-33938 Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service. Libsolv after 0.7.17 Fix from $1,9502021-09-02 CRITICAL 9.8 CVE-2019-18906 A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with acc… Cryptctl 2.4+ Fix from $2,3002021-06-30 HIGH 7.8 CVE-2021-31997 A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from use… Python Postorius 1.3.2-lp152.1.2+ Fix from $1,9502021-06-10