Known vulnerabilities in openSUSE Leap - page 203

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12987
Public exploits: 262
Known exploited (KEV): 65
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12987 known vulnerabilities: 38 critical, 1147 high, 2543 medium, 9257 low Critical High Medium Low

Vulnerabilities (12987)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 - 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU116641 - Improper Authentication
CVE-2025-46818		 CWE-287 Medium
Available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 39 more
#VU116640 - Out-of-bounds read
CVE-2025-46819		 CWE-125 Medium
Available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 39 more
#VU116639 - Integer overflow
CVE-2025-46817		 CWE-190 High
Available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 46 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Available
No
 - 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 57 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59682		 CWE-22 Medium
No
No
 - 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 14 more
#VU116426 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59681		 CWE-89 High
No
No
 - 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 12 more
#VU116185 - Improper Access Control
CVE-2025-41244		 CWE-284 High
No
Exploited
 - 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU116116 - Improper Resource Shutdown or Release
CVE-2024-55553		 CWE-404 Medium
No
No
 - 25.09.2025 SB2025092543
SB2025092554
SB2025092556
and 1 more
#VU116114 - Reachable Assertion
CVE-2025-50422		 CWE-617 Low
No
No
 - 25.09.2025 SB2025092541
SB2025092549
SB2025092555
and 5 more
#VU115761 - XML Injection
CVE-2025-9375		 CWE-91 Medium
No
No
 - 18.09.2025 SB2025091824
SB2025091832
SB2025092653
and 3 more
#VU114558 - Missing release of memory after effective lifetime
CVE-2025-58058		 CWE-401 Medium
No
No
 - 29.08.2025 SB2025082919
SB2025083001
SB2025090123
and 39 more
#VU114082 - Out-of-bounds read
CVE-2025-53859		 CWE-125 Low
No
No
 - 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU112118 - NULL Pointer Dereference
CVE-2025-38089		 CWE-476 Low
Available
No
 - 02.07.2025 SB2025070293
SB2025072102
SB2025072121
and 54 more
#VU109790 - Cleartext Storage of Sensitive Information
CVE-2025-48708		 CWE-312 Medium
Available
No
 - 24.05.2025 SB2025052401
SB2025052402
SB2025052754
and 7 more
#VU103743 - Out-of-bounds read
CVE-2025-21692		 CWE-125 Low
Available
No
 - 10.02.2025 SB2025021063
SB2025030557
SB2025031148
and 57 more
#VU103686 - Improper Authentication
CVE-2025-23419		 CWE-287 Low
No
No
 - 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614		 CWE-444 Medium
No
No
 - 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647		 CWE-444 Medium
No
No
 - 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175		 CWE-444 Medium
No
No
 - 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more


Showing elements 4041 - 4060 out of 12987