Known vulnerabilities in openSUSE Leap - page 622

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 13005
Public exploits: 262
Known exploited (KEV): 65

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 13005 known vulnerabilities: 38 critical, 1149 high, 2555 medium, 9261 low Critical High Medium Low

Vulnerabilities (13005)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68560 - UNIX Symbolic Link (Symlink) Following
CVE-2021-32000		 CWE-61 Low
No
No
 - 20.10.2022 SB2022102092
SB2022102093
#VU68550 - Missing release of memory after effective lifetime
CVE-2022-2963		 CWE-401 Low
No
No
 - 20.10.2022 SB2022102073
SB2022102075
SB2022102076
and 3 more
#VU68115 - Command injection
CVE-2022-3140		 CWE-77 High
No
No
 - 11.10.2022 SB2022101127
SB2022101306
SB2022101830
and 7 more
#VU68074 - Missing release of memory after effective lifetime
CVE-2021-3574		 CWE-401 Medium
No
No
 - 10.10.2022 SB2022101002
SB2022101005
SB2022112407
and 12 more
#VU67945 - Resource exhaustion
CVE-2022-36055		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU67910 - Improper Verification of Cryptographic Signature
CVE-2022-36056		 CWE-347 Medium
No
No
 - 04.10.2022 SB2022100442
SB2022100445
SB2022120642
#VU67719 - Incorrect Default Permissions
CVE-2022-31251		 CWE-276 Low
No
No
 - 28.09.2022 SB2022092834
SB2022093020
SB2022093024
and 5 more
#VU67609 - Out-of-bounds read
CVE-2022-41318		 CWE-125 Medium
No
No
 - 23.09.2022 SB2022092322
SB2022092651
SB2022100537
and 20 more
#VU67604 - Improper Access Control
CVE-2022-41317		 CWE-284 Low
No
No
 - 23.09.2022 SB2022092311
SB2022092651
SB2022100635
and 9 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 - 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU67589 - NULL Pointer Dereference
CVE-2020-35538		 CWE-476 Medium
No
No
 - 22.09.2022 SB2022092235
SB2022092240
SB2022093033
and 6 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 - 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU67511 - Use After Free
CVE-2020-27784		 CWE-416 Low
No
No
 - 20.09.2022 SB2022092043
SB2022092046
SB2022092823
and 5 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 - 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU65768 - Inadequate Encryption Strength
CVE-2022-26307		 CWE-326 Low
No
No
 - 25.07.2022 SB2022072548
SB2022100634
SB2022101830
and 5 more
#VU65760 - Improper Certificate Validation
CVE-2022-26305		 CWE-295 Medium
No
No
 - 25.07.2022 SB2022072520
SB2022100634
SB2022101830
and 5 more
#VU62702 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29869		 CWE-200 Medium
No
No
 - 29.04.2022 SB2022042911
SB2022060218
SB2022060832
and 10 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790		 CWE-444 Medium
No
No
 - 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU59812 - Permissions, Privileges, and Access Controls
CVE-2021-4155		 CWE-264 Low
No
No
 - 19.01.2022 SB2022011910
SB2022011932
SB2022011937
and 54 more
#VU23492 - Improper input validation
CVE-2019-1352		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 18 more


Showing elements 12421 - 12440 out of 13005