Known vulnerabilities in Opensuse - page 152

Vendor: SUSE
Software: Opensuse
Software CPE: cpe:2.3:o:suse:opensuse:*:*:*:*:*:*:*:*
Total vulnerabilities: 3465
Public exploits: 205
Known exploited (KEV): 41
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Opensuse Opensuse is affected by 3465 known vulnerabilities: 16 critical, 826 high, 999 medium, 1624 low Critical High Medium Low

Vulnerabilities (3465)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12271 - Resource exhaustion
CVE-2017-12691
CWE-400 Low
No
No
- 27.04.2018 SB2017083004
SB2018010545
SB2018010437
#VU12272 - Missing release of memory after effective lifetime
CVE-2017-14343
CWE-401 Low
No
No
- 16.04.2018 SB2017083004
SB2018010545
SB2018010437
#VU11546 - Buffer overflow
CVE-2017-15804
CWE-120 High
No
No
- 04.04.2018 SB2018040501
SB2018051109
SB2018062019
and 9 more
#VU11547 - Uncontrolled Search Path Element
CVE-2017-16997
CWE-427 Low
No
No
- 04.04.2018 SB2018040501
SB2018120711
SB2018103028
and 4 more
#VU9992 - Buffer Underwrite ('Buffer Underflow')
CVE-2018-1000001
CWE-124 Low
Available
No
- 12.01.2018 SB2018011202
SB2018011207
SB2018011710
and 18 more
#VU9883 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5715
CWE-200 Low
Available
No
- 09.01.2018 SB2018010416
SB2018010502
SB2018011101
and 151 more
#VU9783 - Resource exhaustion
CVE-2017-11188
CWE-400 Low
No
No
- 27.12.2017 SB2017122214
SB2017122004
SB2017122005
#VU9781 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CWE-300 Low
No
No
- 26.12.2017 SB2017122212
SB2017122213
#VU9734 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-7829
CWE-451 Low
No
No
- 25.12.2017 SB2017122209
SB2017122602
SB2017122603
and 3 more
#VU9733 - Improper input validation
CVE-2017-7848
CWE-20 Low
No
No
- 25.12.2017 SB2017122209
SB2017122602
SB2017122603
and 3 more
#VU9732 - Missing release of memory after effective lifetime
CVE-2017-7847
CWE-401 Low
No
No
- 25.12.2017 SB2017122209
SB2017122602
SB2017122603
and 3 more
#VU9731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7846
CWE-79 Low
No
No
- 25.12.2017 SB2017122209
SB2017122602
SB2017122603
and 3 more
#VU33205 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15277
CWE-200 Medium
No
No
- 12.10.2017 SB2017101220
SB2019061655
SB2018010545
and 1 more
#VU46326 - Memory corruption
CVE-2017-15281
CWE-119 High
No
No
- 12.10.2017 SB2018010545
SB2018010437
#VU38356 - Improper input validation
CVE-2017-14174
CWE-20 Medium
No
No
- 07.09.2017 SB2017090730
SB2018010545
SB2018010437
#VU33243 - Memory corruption
CVE-2017-14042
CWE-119 Medium
No
No
- 31.08.2017 SB2017083129
SB2017100317
SB2018010545
and 3 more
#VU38446 - Improper input validation
CVE-2017-13061
CWE-20 Medium
No
No
- 22.08.2017 SB2017080407
SB2018010545
SB2018010437
#VU38447 - Missing release of memory after effective lifetime
CVE-2017-13062
CWE-401 Medium
No
No
- 22.08.2017 SB2017082210
SB2018010545
SB2018010437
#VU38592 - Allocation of Resources Without Limits or Throttling
CVE-2017-12563
CWE-770 Medium
No
No
- 05.08.2017 SB2017080503
SB2018010545
SB2018010437
#VU7546 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-1000083
CWE-94 High
Available
No
- 14.07.2017 SB2017071410
SB2017071309
SB2017071706
and 12 more


Showing elements 3021 - 3040 out of 3465