Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- suse rancherRancher users retain access after moving namespaces into projects they don't have access toCVE-2020-10676Fix available8.8 High
- suse rancherRancher UI has multiple Cross-Site Scripting (XSS) issuesCVE-2022-43760Fix available8.4 High
- suse rancherRancher vulnerable to Privilege Escalation via manipulation of SecretsCVE-2023-22647Fix available9.9 Critical
- suse rancherRancher's Azure AD permission changes are not reflected on active sessionsCVE-2023-22648Fix available8.0 High
- debian linux, linux kernel, suse linux enterprise +2 moreAn issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16...CVE-2023-34256Fix availableDisputed5.5 Medium
- suse rancherRancher Webhook is misconfigured during upgrade processCVE-2023-22651Fix available9.9 Critical
- service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 moreThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to...CVE-2023-29552In KEVEPSS 64.0%7.5 High
- linuxfoundation kubewarden-controller, suse kubewarden +1 morekubewarden: Excessive permissions for kubewarden-controller-manager-cluster-roleCVE-2023-226458.0 High
- suse opensuse factoryobs-service-go_modules: arbitrary directory deleteCVE-2022-45155Fix available5.5 Medium
- linux kernel, suse linux enterprise server +1 moreIn the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return...CVE-2023-23005Fix availableDisputed5.5 Medium
- opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 moresupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.shCVE-2022-45154Fix available4.4 Medium
- suse rancher, wrangler +1 more[RANCHER] OS command injection in Rancher and FleetCVE-2022-31249Fix available7.5 High
- suse rancher, wrangler +1 moreRancher/Wrangler: Denial of service when processing Git credentialsCVE-2022-43756Fix available5.9 Medium
- suse rancherRancher: Exposure of sensitive fieldsCVE-2022-43757Fix available9.9 Critical
- suse rancherRancher: Command injection in Git packageCVE-2022-43758Fix available7.6 High
- suse rancherAuthenticated user can gain unauthorized shell pod and kubectl access in the local clusterCVE-2022-21953Fix available7.4 High
- suse rancherRancher: Privilege escalation via promoted rolesCVE-2022-43759Fix available7.2 High
- suse rancherRancher: Non-random authentication tokenCVE-2022-43755Fix available7.1 High
- opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 morelibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsCVE-2023-22643Fix available6.3 Medium
- opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 morermt-server-pubcloud allows to escalate from user _rmt to rootCVE-2022-31254Fix available7.8 High
- opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 moresaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.slsCVE-2022-45153Fix available7.0 High
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.doCVE-2022-437542.6 Low
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownloadCVE-2022-437534.3 Medium
- suse manager server, linux enterprise module for suse manager server 4.2, linux enterprise module for suse manager server 4.3 +2 more +4 moreSUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewActionCVE-2022-312554.3 Medium
- opensuse factory, suse opensuse factory +1 moresendmail: mail to root privilege escalation via sm-client.pre scriptCVE-2022-31256Fix available7.7 High
- opensuse leap, leap micro, leap 15.3 +4 more +6 morepermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()CVE-2022-31252Fix available4.4 Medium
- opensuse factory, suse opensuse factory +1 moreslurm: %post for slurm-testsuite operates as root in user owned directoryCVE-2022-312516.5 Medium
- suse rancherRancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)CVE-2022-31247Fix available9.1 Critical
- suse rancherRancher: Failure to properly sanitize credentials in cluster template answersCVE-2021-36783Fix available9.9 Critical
- suse rancherRancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io objectCVE-2021-36782Public exploitFix available9.9 Critical
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA user enumeration via weak error messageCVE-2022-31248Fix available5.3 Medium
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA unauthenticated remote DoS via resource exhaustionCVE-2022-219527.5 High
- suse rancherRancher: Weave CNI password is not set if RKE template is used with CNI value overriddenCVE-2022-21951Fix available6.8 Medium
- opensuse open build serviceMultiple XXE vulnerabilities in OBSCVE-2022-21949Fix available8.8 High
- suse rancherWrite access to the Catalog for any user when restricted-admin role is enabledCVE-2021-4200Fix available5.4 Medium
- suse rancherPrivilege escalation for users with create/update permissions in Global RolesCVE-2021-36784Fix available7.2 High
- suse rancherExposure of repository credentials to external third-party sourcesCVE-2021-36778Fix available7.3 High
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 High
- rancherSteve API proxy impersonationCVE-2021-36776Fix available8.8 High
- rancherDeleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindingsCVE-2021-36775Fix available8.8 High
- suse rancher, rancher desktop +1 morerancher desktop: Dashboard API is network accessibleCVE-2022-219478.3 High
- gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 moregrub2-once uses fixed file name in /var/tmpCVE-2021-46705Fix available5.1 Medium
- cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 moreCommand Injection in CobblerCVE-2021-45082Fix available7.8 High
- linux kernel, suse linux enterprise +1 moreA flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed...CVE-2021-4028Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- linuxfoundation longhornUnauthorized data access from replicas through vulnerable instance manager podsCVE-2021-367808.1 High
- linuxfoundation longhornHost operations allowed in privileged Longhorn managed podsCVE-2021-367799.6 Critical
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- Show moreLoading…