Known vulnerabilities in openSUSE Leap - page 6

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12987
Public exploits: 262
Known exploited (KEV): 65
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12987 known vulnerabilities: 38 critical, 1147 high, 2543 medium, 9257 low Critical High Medium Low

Vulnerabilities (12987)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151587 - Missing release of memory after effective lifetime
CVE-2026-78131		 CWE-401 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 4 more
#VU151586 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-78132		 CWE-835 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151584 - Authentication Bypass by Spoofing
CVE-2026-78134		 CWE-290 Low
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU146004 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-59944		 CWE-59 Medium
No
No
 - 27.08.2026 SB20260827147
SB20260827152
SB20260827153
and 7 more
#VU146003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-84361		 CWE-78 High
No
No
 - 27.08.2026 SB20260827147
SB2026090852
SB2026093048
#VU144588 - Resource exhaustion
CVE-2026-86420		 CWE-400 Medium
No
No
 - 24.08.2026 SB2026082424
SB20260914119
SB2026092172
and 3 more
#VU144587 - Missing release of memory after effective lifetime
CVE-2026-86421		 CWE-401 Medium
No
No
 - 24.08.2026 SB2026082424
SB20260914119
SB2026092172
and 3 more
#VU144585 - Use After Free
CVE-2026-86423		 CWE-416 Medium
No
No
 - 24.08.2026 SB2026082424
SB20260914119
SB2026092172
and 3 more
#VU144583 - Use After Free
CVE-2026-86425		 CWE-416 Medium
No
No
 - 24.08.2026 SB2026082424
SB20260914119
SB2026092172
and 3 more
#VU138584 - Off-by-one Error
CVE-2026-64047		 CWE-193 Low
No
No
 - 20.07.2026 SB20260720176
SB2026072357
SB2026072358
and 35 more
#VU138501 - Improper Access Control
CVE-2026-64137		 CWE-284 Low
No
No
 - 20.07.2026 SB2026072089
SB2026072366
SB2026072479
and 22 more
#VU138500 - Improper Access Control
CVE-2026-64137		 CWE-284 Low
No
No
 - 20.07.2026 SB2026072088
SB2026072366
SB2026072479
and 22 more
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 3 more
#VU131373 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45793		 CWE-200 Medium
No
No
 - 13.05.2026 SB2026051396
SB20260721146
SB2026093043
and 1 more
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131		 CWE-362 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Available
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 12 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 - 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 - 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 30 more


Showing elements 101 - 120 out of 12987