Known vulnerabilities in openSUSE Leap - page 30

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12331
Public exploits: 252
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12331 known vulnerabilities: 38 critical, 1037 high, 2248 medium, 9006 low Critical High Medium Low

Vulnerabilities (12331)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130912 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-14179		 CWE-89 High
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 19 more
#VU130913 - Use After Free
CVE-2026-6722		 CWE-416 Medium
No
No
 - 10.05.2026 SB2026051001
SB20260511112
SB20260513120
and 17 more
#VU128479 - Allocation of Resources Without Limits or Throttling
CVE-2026-42561		 CWE-770 Medium
No
No
 - 30.04.2026 SB2026043006
SB2026051876
#VU128414 - Allocation of Resources Without Limits or Throttling
CVE-2026-42198		 CWE-770 Medium
No
No
 - 28.04.2026 SB20260428236
SB2026052067
SB2026052092
and 23 more
#VU127726 - Stack-based buffer overflow
CVE-2026-42050		 CWE-121 Medium
No
No
 - 25.04.2026 SB2026042544
SB2026050333
SB2026051959
and 9 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32147		 CWE-22 Low
No
No
 - 21.04.2026 SB2026042143
SB2026051961
SB2026070964
and 3 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881		 CWE-78 Medium
No
No
 - 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU124838 - Resource exhaustion
CVE-2026-34230		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124837 - Permissive Regular Expression
CVE-2026-34763		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124836 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-34786		 CWE-180 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124835 - Improper Handling of Length Parameter Inconsistency
CVE-2026-34831		 CWE-130 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124832 - Resource exhaustion
CVE-2026-34826		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124828 - Permissive Regular Expression
CVE-2026-34830		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124827 - Partial String Comparison
CVE-2026-34785		 CWE-187 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124826 - Resource exhaustion
CVE-2026-34829		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124823 - Interpretation Conflict
CVE-2026-26961		 CWE-436 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-26962		 CWE-93 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124785 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-27456		 CWE-362 Low
No
No
 - 01.04.2026 SB2026040169
SB2026040201
SB2026040202
and 8 more
#VU112884 - Insufficient Verification of Data Authenticity
CVE-2024-6174		 CWE-345 High
No
No
 - 14.07.2025 SB2025071434
SB2025071437
SB2025071438
and 18 more
#VU112883 - Incorrect Default Permissions
CVE-2024-11584		 CWE-276 Low
No
No
 - 14.07.2025 SB2025071434
SB2025071437
SB2025071438
and 10 more


Showing elements 581 - 600 out of 12331