Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- steve-community steveSteve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksCVE-2023-32198Fix available8.0 High
- fleetdm fleetFleet doesn’t validate a server’s certificate when connecting through SSHCVE-2025-23390Fix available6.3 Medium
- suse rancherRancher users who can create Projects can gain access to arbitrary projectsCVE-2024-22031Fix available8.5 High
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in SystemsController.java in spacewalk-javaCVE-2025-23392Fix available5.6 Medium
- suse rancherRancher: Restricted Administrator can change Administrator's passwordsCVE-2025-23391Fix available9.1 Critical
- suse opensuse tumbleweedgerbera: Privilege escalation from user gerbera to root because of insecure %post scriptCVE-2025-23386Fix available7.8 High
- suse rancherRancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First LoginCVE-2025-23389Fix available8.4 High
- suse rancherUnauthenticated stack overflow in /v3-public/authproviders APICVE-2025-23388Fix available8.2 High
- suse rancherRancher's SAML-based login via CLI can be denied by unauthenticated usersCVE-2025-23387Fix available5.3 Medium
- suse rancherStored Cross-site Scripting vulnerability in Rancher UICVE-2024-52281Fix available8.9 High
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- suse opensuse factoryDoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridgeCVE-2024-22038Fix available6.8 Medium
- suse hackweekMissing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers...CVE-2024-522835.7 Medium
- suse rancherRancher Helm Applications may have sensitive values leakedCVE-2024-52282Fix available6.2 Medium
- suse rancherUsers can issue watch commands for arbitrary resourcesCVE-2024-52280Fix available7.7 High
- suse manager server 5.0Database password leaked by systemd uyuni-server-attestation serviceCVE-2024-22037Fix available5.7 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, Organization Credentials in spacewalk-webCVE-2024-495034.6 Medium
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.2.7.8.1 +1 moreReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-webCVE-2024-495024.6 Medium
- opensuse mirrorcache, tumbleweed, suse opensuse tumbleweed +2 moreXSS vulnerability found in OpenSuse MirrorCacheCVE-2024-495055.3 Medium
- suse opensuse tumbleweedgrub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted ImagesCVE-2024-49504Fix available7.0 High
- suse rancherRancher Remote Code Execution via Cluster/Node DriversCVE-2024-22036Fix available9.1 Critical
- suse rancherExposure of vSphere's CPI and CSI credentials in RancherCVE-2022-45157Fix available8.5 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data...CVE-2024-46956Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of...CVE-2024-46955Fix available5.5 Medium
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer...CVE-2024-46953Fix available7.8 High
- artifex ghostscript, debian linux, suse linux enterprise high performance computing +2 more +4 moreAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked...CVE-2024-46951Fix available7.8 High
- suse rancherRancher agents can be hijacked by taking over the Rancher Server URLCVE-2024-22030Fix available8.0 High
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 moreCrafted projects can overwrite special files in the .osc config directoryCVE-2024-22034Fix available5.5 Medium
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +2 more +4 moreobs-service-download_url is vulnerable to argument injectionCVE-2024-22033Fix available5.1 Medium
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- suse rancherRancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpecCVE-2024-22032Fix available7.1 High
- suse rancherRancher's External RoleTemplates can lead to privilege escalationCVE-2023-32197Fix available7.5 High
- rancherRancher's External RoleTemplates can lead to privilege escalationCVE-2023-32196Fix available7.5 High
- suse rkerke's credentials are stored in the RKE1 Cluster state ConfigMapCVE-2023-32191Fix available9.9 Critical
- suse rancherRancher does not automatically clean up a user deleted or disabled from the configured Authentication ProviderCVE-2023-22650Fix available8.7 High
- suse opensuse tumbleweedmlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readableCVE-2023-321908.5 High
- suse manager server module 4.3Insecure handling SSH key in SUSE Manager when bootstrapping new clientsCVE-2023-321896.4 Medium
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 moretomcat packaging allows for escalation to root from tomcat userCVE-2024-22029Fix available7.8 High
- kubernetes apiserverRancher API Server Cross-site Scripting VulnerabilityCVE-2023-32192Fix available8.3 High
- rancher normanNorman API Cross-site Scripting VulnerabilityCVE-2023-32193Fix available8.3 High
- rancherRancher 'Audit Log' leaks sensitive informationCVE-2023-22649Fix available8.4 High
- rancherRancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'CVE-2023-32194Fix available8.6 High
- relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y...CVE-2024-23301Fix available5.5 Medium
- neuvectorJWT token compromise can allow malicious actions including Remote Code Execution (RCE)CVE-2023-32188Fix available9.4 Critical
- suse rke2, rancher rke2 +1 moreRKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attackCVE-2023-32186Fix available7.5 High
- k3sK3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attackCVE-2023-32187Fix available7.5 High
- opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 moreA Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux...CVE-2023-32182Fix available5.9 Medium
- suse neuvector, manager server +1 moreJWT token compromise can allow malicious actions including Remote Code Execution (RCE)CVE-2023-22644Fix available9.4 Critical
- Show moreLoading…