Login Request a demo
OP
Vendor
Opensuse
56 products with CVEs on record
3,943
CVEs
78
On KEV
2
New 30D
Products
TU
Tumbleweed
openSUSE
10.0
7 CVEs1 on KEV2 new
OP
Opensuse
Opensuse
10.0
1,456 CVEs45 on KEV0 new
EV
Evergreen
Opensuse
9.8
44 CVEs10 on KEV0 new
LE
Leap
Opensuse
10.0
1,893 CVEs19 on KEV0 new
BS
Backports Sle
Opensuse
9.8
326 CVEs3 on KEV0 new
BA
Backports
Opensuse
9.8
97 CVEs0 on KEV0 new
OB
Open Build Service
Opensuse
9.8
22 CVEs0 on KEV0 new
LI
libsolv
OpenSUSE
7.8
14 CVEs0 on KEV0 new
FA
Factory
openSUSE
7.8
11 CVEs0 on KEV0 new
LI
Libzypp
Opensuse
9.8
7 CVEs0 on KEV0 new
SU
Supportutils
Opensuse
7.8
6 CVEs0 on KEV0 new
OP
Openldap2
Opensuse
7.8
3 CVEs0 on KEV0 new
ZY
Zypper
Opensuse
3.3
3 CVEs0 on KEV0 new
CR
Cryptctl
Opensuse
9.8
2 CVEs0 on KEV0 new
CS
Cscreen
Opensuse
6.1
2 CVEs0 on KEV0 new
LI
Libeconf
Opensuse
6.5
2 CVEs0 on KEV0 new
MU
Munge
Opensuse
7.8
2 CVEs0 on KEV0 new
OP
openbuildservice
opensuse
6.5
2 CVEs0 on KEV0 new
OS
Osc
Opensuse
9.8
2 CVEs0 on KEV0 new
PC
Pcp
Opensuse
7.8
2 CVEs0 on KEV0 new
RM
Rmt-server
Opensuse
7.8
2 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Server
Opensuse
8.8
2 CVEs0 on KEV0 new
TE
Texlive-filesystem
Opensuse
7.0
2 CVEs0 on KEV0 new
WI
Wicked
Opensuse
7.5
2 CVEs0 on KEV0 new
AU
Autoyast2
Opensuse
5.9
1 CVEs0 on KEV0 new
BU
buildservice
openSUSE
10.0
1 CVEs0 on KEV0 new
CA
Canna
Opensuse
5.3
1 CVEs0 on KEV0 new
CY
Cyrus-sasl
Opensuse
7.0
1 CVEs0 on KEV0 new
FW
Factory Watchman
Opensuse
7.8
1 CVEs0 on KEV0 new
HY
Hylafax+
Opensuse
5.3
1 CVEs0 on KEV0 new
IN
Inn
Opensuse
7.8
1 CVEs0 on KEV0 new
LM
Leap Micro
Opensuse
4.4
1 CVEs0 on KEV0 new
LI
Libstorage
Opensuse
5.1
1 CVEs0 on KEV0 new
LI
Libstorage-ng
Opensuse
5.1
1 CVEs0 on KEV0 new
LI
Libzypp-plugin-appdata
Opensuse
7.8
1 CVEs0 on KEV0 new
MI
Mirrorcache
Opensuse
6.1
1 CVEs0 on KEV0 new
MU
Munin
Opensuse
7.8
1 CVEs0 on KEV0 new
OV
Obs-service-source Validator
Opensuse
7.8
1 CVEs0 on KEV0 new
OB
Open Buildservice
Opensuse
7.8
1 CVEs0 on KEV0 new
OC
Openstack Cloud
Opensuse
–
1 CVEs0 on KEV0 new
OL
openSUSE Leap 15.2
openSUSE
3.3
1 CVEs0 on KEV0 new
OL
openSUSE Leap 15.3
openSUSE
4.4
1 CVEs0 on KEV0 new
OL
openSUSE Leap 15.4
openSUSE
4.4
1 CVEs0 on KEV0 new
OL
openSUSE Leap Micro 5.2
openSUSE
4.4
1 CVEs0 on KEV0 new
PH
Package Hub
Opensuse
5.3
1 CVEs0 on KEV0 new
PA
Paste
Opensuse
6.1
1 CVEs0 on KEV0 new
PY
Python-postorius
Opensuse
7.8
1 CVEs0 on KEV0 new
SP
Suse Package Hub
Opensuse
8.8
1 CVEs0 on KEV0 new
SY
Sysconfig
Opensuse
8.1
1 CVEs0 on KEV0 new
TS
Tar Scm
Opensuse
9.8
1 CVEs0 on KEV0 new
TS
Travel Support Program
Opensuse
7.5
1 CVEs0 on KEV0 new
TK
Tumbleweed Kopano-spamd
Opensuse
7.8
1 CVEs0 on KEV0 new
WE
Welcome
Opensuse
7.8
1 CVEs0 on KEV0 new
YA
Yast2-multipath
Opensuse
5.5
1 CVEs0 on KEV0 new
YA
Yast2-printer
Opensuse
8.1
1 CVEs0 on KEV0 new
YA
Yast2-samba-provision
Opensuse
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104618
TU
Tumbleweed
openSUSE
6.2
0%
Oct 15sdbootutil: world-readable debug log
CVE-2026-104617
TU
Tumbleweed
openSUSE
5.1
0%
Oct 15sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline
CVE-2026-48863
LI
libsolv
OpenSUSE
7.5
1%
Jul 16Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
CVE-2026-44941
LI
Libzypp
Opensuse
8.8
1%
Jul 2libzypp path traversal via "keyhint" in repomd.xml
CVE-2026-56004
BU
buildservice
openSUSE
10.0
1%
Jul 2obs-service-tar_scm: command injection via mercurial handler
CVE-2026-25707
LI
Libzypp
Opensuse
8.8
1%
Jun 29Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
CVE-2026-48864
LI
Libsolv
Opensuse
7.8
0%
May 26Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
CVE-2026-9149
LI
Libsolv
Opensuse
6.5
0%
May 20Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
CVE-2026-9150
LI
Libsolv
Opensuse
6.5
0%
May 20Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
CVE-2026-31431
In wildKEV
LE
Leap
Opensuse
7.8
98%
Apr 22crypto: algif_aead - Revert to operating out-of-place
CVE-2026-25506
MU
Munge
Opensuse
7.8
0%
Feb 10MUNGE is an authentication service for creating and validating user credentials
CVE-2025-62875
TU
Tumbleweed
Opensuse
5.5
0%
Nov 20An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD
CVE-2025-32463
In wildKEV
LE
Leap
Opensuse
7.8
55%
Jun 30Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVE-2024-49505
MI
Mirrorcache
Opensuse
6.1
0%
Nov 13A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via…
CVE-2023-32182
LE
Leap
Opensuse
7.8
0%
Sep 19A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance…
CVE-2023-32184
WE
Welcome
Opensuse
7.8
0%
Sep 19A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom…
CVE-2023-32183
TU
Tumbleweed
Opensuse
7.8
0%
Jul 7Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE…
CVE-2023-32181
LI
Libeconf
Opensuse
6.5
1%
Jun 1A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects…
CVE-2023-22652
LI
Libeconf
Opensuse
6.5
1%
Jun 1A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files
CVE-2022-45154
SU
Supportutils
Opensuse
5.5
0%
Feb 15A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15…
CVE-2022-45153
LE
Leap
Opensuse
7.8
0%
Feb 15An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP…
CVE-2022-21948
PA
Paste
Opensuse
6.1
1%
Feb 7An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javascript into SVG files
CVE-2023-22643
LI
Libzypp-plugin-appdata
Opensuse
7.8
2%
Feb 7An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP…
CVE-2022-31254
RM
Rmt-server
Opensuse
7.8
0%
Feb 7A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE…
CVE-2022-46163
TS
Travel Support Program
Opensuse
7.5
1%
Jan 10Travel support program is a rails app to support the travel support program of openSUSE (TSP)
CVE-2022-31253
OP
Openldap2
Opensuse
7.8
0%
Nov 9A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory…
CVE-2022-31256
FA
Factory
Opensuse
7.8
0%
Oct 26sendmail: mail to root privilege escalation via sm-client.pre script
CVE-2022-31252
OL
openSUSE Leap 15.3
openSUSE
4.4
0%
Oct 6permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
CVE-2022-31251
FA
Factory
Opensuse
6.3
0%
Sep 7A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to…
CVE-2022-21950
CA
Canna
Opensuse
5.3
0%
Sep 7A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain…
CVE-2022-31250
TU
Tumbleweed
Opensuse
7.8
0%
Jul 20A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root
CVE-2022-21949
OB
Open Build Service
Opensuse
8.8
2%
May 3A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations
CVE-2022-21946
CS
Cscreen
Opensuse
5.3
0%
Mar 16A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of…
CVE-2022-21945
CS
Cscreen
Opensuse
6.1
0%
Mar 16A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems
CVE-2021-36777
OB
Open Build Service
Opensuse
8.8
1%
Mar 9A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form…
CVE-2021-44568
LI
Libsolv
Opensuse
6.5
2%
Feb 21Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line…
CVE-2021-45082
BA
Backports
Opensuse
7.8
0%
Feb 19An issue was discovered in Cobbler before 3.3.1
CVE-2022-21944
FW
Factory Watchman
Opensuse
7.8
0%
Jan 26A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to…
CVE-2021-36781
FA
Factory
Opensuse
4.4
0%
Jan 14A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an…
CVE-2021-46142
FA
Factory
Opensuse
5.5
1%
Jan 6An issue was discovered in uriparser before 0.9.6
CVE-2021-46141
FA
Factory
Opensuse
5.5
1%
Jan 6An issue was discovered in uriparser before 0.9.6
CVE-2021-41819
FA
Factory
Opensuse
7.5
3%
Jan 1CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names
CVE-2021-41817
FA
Factory
Opensuse
7.5
3%
Jan 1Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string
CVE-2021-4166
FA
Factory
Opensuse
7.1
2%
Dec 25Out-of-bounds Read in vim/vim
CVE-2021-33938
LI
Libsolv
Opensuse
7.5
1%
Sep 2Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service
CVE-2021-33930
LI
Libsolv
Opensuse
7.5
1%
Sep 2Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service
CVE-2021-33929
LI
Libsolv
Opensuse
7.5
1%
Sep 2Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service
CVE-2021-33928
LI
Libsolv
Opensuse
7.5
1%
Sep 2Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service
CVE-2019-18906
CR
Cryptctl
Opensuse
9.8
1%
Jun 30A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to…
CVE-2021-31998
IN
Inn
Opensuse
7.8
0%
Jun 10A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local…
CVE-2021-31997
PY
Python-postorius
Opensuse
7.8
0%
Jun 10A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or…
CVE-2021-3200
LI
Libsolv
Opensuse
3.3
1%
May 18Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp…
CVE-2021-25317
FA
Factory
openSUSE
3.3
0%
May 5cups: ownership of /var/log/cups allows the lp user to create files as root
CVE-2021-25319
FA
Factory
Opensuse
7.8
0%
May 5A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root
CVE-2020-8032
CY
Cyrus-sasl
Opensuse
7.0
0%
Feb 25A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root
CVE-2020-8027
OP
Openldap2
Opensuse
6.6
0%
Feb 11A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2…
CVE-2020-8031
OB
Open Build Service
Opensuse
5.4
1%
Feb 11A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown…
CVE-2021-26676
LE
Leap
Opensuse
6.5
1%
Feb 9gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp
CVE-2021-26675
LE
Leap
Opensuse
8.8
1%
Feb 9A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code
CVE-2020-0569
LE
Leap
Opensuse
5.7
1%
Nov 23Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access