Login Request a demo
ZY
Product
Zypper
by Opensuse · last CVE Mar 1, 2018
3
CVEs
0
On KEV
3.3
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 1
Severity
All severities3Critical0High0Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zypper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-9271
3.3
0%
Mar 1
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used
Affected: All versions, or not specified
CVE-2012-0420
–
0%
Dec 2
zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact,…
Affected: through 1.2.8; 0.11.6; 1.0.2; 1.6.16
CVE-2008-3187
–
2%
Jul 21
zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of…
Affected: 10.2; 10.3; 11.0
Showing 3