Known vulnerabilities in openSUSE Leap - page 11

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Total vulnerabilities: 12331
Public exploits: 252
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12331 known vulnerabilities: 38 critical, 1037 high, 2248 medium, 9006 low Critical High Medium Low

Vulnerabilities (12331)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137009 - Resource exhaustion
CVE-2026-59200
CWE-400 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137007 - Allocation of Resources Without Limits or Throttling
CVE-2026-59204
CWE-770 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072516
and 6 more
#VU137006 - Out-of-bounds read
CVE-2026-54058
CWE-125 High
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026071949
and 12 more
#VU137005 - Heap-based Buffer Overflow
CVE-2026-59197
CWE-122 High
No
No
- 07.07.2026 SB2026041113
SB2026071741
SB2026071949
and 12 more
#VU137004 - Out-of-bounds read
CVE-2026-59198
CWE-125 Medium
No
No
- 07.07.2026 SB2026041113
SB2026071741
SB2026072428
and 6 more
#VU137003 - Heap-based Buffer Overflow
CVE-2026-59199
CWE-122 Medium
No
No
- 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU136810 - Use After Free
CVE-2026-53357
CWE-416 Low
No
No
- 02.07.2026 SB2026070291
SB2026070968
SB20260721107
and 10 more
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946
CWE-22 Medium
No
No
- 01.07.2026 SB2026070158
SB20260721146
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948
CWE-22 Medium
No
No
- 01.07.2026 SB2026070158
SB20260721146
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947
CWE-532 Low
No
No
- 01.07.2026 SB2026070158
SB20260721146
#VU135862 - Improper Access Control
CVE-2026-55956
CWE-284 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955
CWE-294 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 6 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434
CWE-295 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229
CWE-79 Low
No
No
- 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135496 - Use After Free
CVE-2026-53256
CWE-416 Medium
No
No
- 26.06.2026 SB2026062666
SB20260721153
SB2026072208
and 3 more
#VU131979 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-44405
CWE-327 Low
No
No
- 20.05.2026 SB2026052061
SB2026052062
SB20260715112
and 2 more
#VU131788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-44172
CWE-89 Medium
No
No
- 19.05.2026 SB2026051914
SB20260717103
SB20260721154
and 2 more
#VU131373 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45793
CWE-200 Medium
No
No
- 13.05.2026 SB2026051396
SB20260721146


Showing elements 201 - 220 out of 12331