Opensuse Leap vulnerabilities

• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 more libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls CVE-2023-22643 Fix available 6.3 MediumJanuary 17, 2023
• opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 more rmt-server-pubcloud allows to escalate from user _rmt to root CVE-2022-31254 Fix available 7.8 HighJanuary 3, 2023
• opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 more saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls CVE-2022-45153 Fix available 7.0 HighJanuary 2, 2023
• opensuse leap, leap micro, leap 15.3 +4 more +6 more permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() CVE-2022-31252 Fix available 4.4 MediumSeptember 19, 2022
• uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 more An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in... CVE-2021-46141 Fix available 5.5 MediumJanuary 6, 2022
• uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 more An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in... CVE-2021-46142 Fix available 5.5 MediumJanuary 6, 2022
• ruby-lang cgi, ruby, debian linux +6 more +8 more Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• ruby-lang date, ruby, debian linux +6 more +8 more Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• opensuse factory, leap 15.2, suse arpwatch +3 more +5 more arpwatch: Local privilege escalation from runtime user to root CVE-2021-25321 Fix available 7.8 HighJune 28, 2021
• opensuse factory, leap 15.2, python-hyperkitty project python-hyperkitty +2 more python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root CVE-2021-25322 6.8 MediumJune 10, 2021
• opensuse factory, leap 15.2, python-postorius +2 more python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root CVE-2021-31997 6.8 MediumJune 10, 2021
• opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 more inn: %post calls user owned file allowing local privilege escalation to root CVE-2021-31998 Fix available 6.8 MediumJune 3, 2021
• opensuse factory, leap 15.2, suse cups +4 more +6 more cups: ownership of /var/log/cups allows the lp user to create files as root CVE-2021-25317 Fix available 3.3 LowApril 30, 2021
• intel connman, debian linux, opensuse leap +2 more gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack... CVE-2021-26676 Fix available 6.5 MediumFebruary 8, 2021
• intel connman, debian linux, opensuse leap +2 more A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network... CVE-2021-26675 Fix available 8.8 HighFebruary 8, 2021
• saltstack salt, debian linux, fedoraproject fedora +1 more +3 more SaltStack Salt Command Injection in netapi ssh client CVE-2020-16846 In KEVPublic exploitFix available EPSS 99.6% 9.8 CriticalNovember 4, 2020
• sddm project sddm, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -... CVE-2020-28049 Fix available 6.3 MediumNovember 4, 2020
• google chrome, debian linux, opensuse backports sle +1 more +3 more Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote... CVE-2020-16011 Fix available 9.6 CriticalNovember 3, 2020
• google chrome, cefsharp, debian linux +6 more +8 more Inappropriate implementation in V8 CVE-2020-16009 In KEVFix available EPSS 48.3% 8.8 HighNovember 3, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker... CVE-2020-16008 Fix available 8.8 HighNovember 3, 2020
• google chrome, debian linux, opensuse backports sle +1 more +3 more Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local... CVE-2020-16007 Fix available 7.8 HighNovember 3, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote... CVE-2020-16006 Fix available 8.8 HighNovember 3, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote... CVE-2020-16005 Fix available 8.8 HighNovember 3, 2020
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote... CVE-2020-16004 Fix available 8.8 HighNovember 3, 2020
• samba, debian linux, fedoraproject fedora +1 more +3 more A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15,... CVE-2020-14323 Fix available 5.5 MediumOctober 29, 2020
• xen, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of... CVE-2020-27670 Fix available 7.8 HighOctober 22, 2020
• xen, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a... CVE-2020-27671 Fix available 7.8 HighOctober 22, 2020
• xen, debian linux, fedoraproject fedora +1 more +3 more An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS... CVE-2020-27672 Fix available 7.0 HighOctober 22, 2020
• debian linux, linux kernel, xen +1 more +3 more An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest... CVE-2020-27673 Fix available 5.5 MediumOctober 22, 2020
• imagemagick, debian linux, opensuse leap +2 more ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which... CVE-2020-27560 Fix available 3.3 LowOctober 22, 2020
• debian linux, netapp 7-mode transition tool, active iq unified manager +18 more +20 more Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions... CVE-2020-14803 Fix available 5.3 MediumOctober 21, 2020
• debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14798 Fix available 3.1 LowOctober 21, 2020
• debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14797 Fix available 3.7 LowOctober 21, 2020
• debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14796 Fix available 3.1 LowOctober 21, 2020
• debian linux, mcafee epolicy orchestrator, netapp 7-mode transition tool +17 more +19 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot).... CVE-2020-14792 Fix available 4.2 MediumOctober 21, 2020
• debian linux, mcafee epolicy orchestrator, netapp active iq unified manager +14 more +16 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).... CVE-2020-14782 Fix available 3.7 LowOctober 21, 2020
• debian linux, netapp 7-mode transition tool, active iq unified manager +15 more +17 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).... CVE-2020-14781 Fix available 3.7 LowOctober 21, 2020
• debian linux, fedoraproject fedora, netapp 7-mode transition tool +17 more +19 more Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:... CVE-2020-14779 Fix available 3.7 LowOctober 21, 2020
• mozilla firefox, firefox esr, thunderbird +2 more +4 more Mozilla developers and community members reported memory safety bugs present in Firefox 81 and... CVE-2020-15683 Fix available 9.8 CriticalOctober 21, 2020
• powerdns recursor, opensuse backports sle, leap +2 more An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before... CVE-2020-25829 Fix available 7.5 HighOctober 16, 2020
• bluez, debian linux, opensuse leap +2 more In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared... CVE-2020-27153 Fix available 8.6 HighOctober 15, 2020
• hpcng singularity, opensuse backports sle, leap +2 more Path traversal and files overwrite with unsquashfs CVE-2020-15229 Fix available 8.2 HighOctober 14, 2020
• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve... CVE-2020-25645 Fix available 7.5 HighOctober 13, 2020
• phpmyadmin, debian linux, fedoraproject fedora +2 more +4 more phpMyAdmin Cross-site Scripting (XSS) CVE-2020-26934 Fix available 6.1 MediumOctober 10, 2020
• phpmyadmin, debian linux, fedoraproject fedora +2 more +4 more phpMyAdmin SQL injection vulnerability CVE-2020-26935 Fix available EPSS 63.7% 9.8 CriticalOctober 10, 2020
• kde kdeconnect, opensuse backports sle, leap +2 more In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send... CVE-2020-26164 Fix available 5.5 MediumOctober 7, 2020
• wireshark, debian linux, fedoraproject fedora +2 more +4 more In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector... CVE-2020-25863 Fix available 7.5 HighOctober 6, 2020
• Show olderLoading…