Known vulnerabilities in openSUSE Leap Micro

Vendor: SUSE
Software: openSUSE Leap Micro
Software CPE: cpe:2.3:o:suse:opensuse_leap_micro:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2715
Public exploits: 50
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap Micro openSUSE Leap Micro is affected by 2715 known vulnerabilities: 1 critical, 115 high, 291 medium, 2308 low Critical High Medium Low

Vulnerabilities (2715)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 - 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101942 - Incorrect Default Permissions
CVE-2024-21820		 CWE-276 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 11 more
#VU101941 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23918		 CWE-754 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 14 more
#VU101936 - Improper Finite State Machines (FSMs) in Hardware Logic
CVE-2024-21853		 CWE-1245 Low
No
No
 - 27.12.2024 SB2024122729
SB2024122734
SB2024122735
and 14 more
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616		 CWE-337 Medium
No
No
 - 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 - 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU100995 - Memory corruption
CVE-2024-52531		 CWE-119 Low
No
No
 - 27.11.2024 SB2024111329
SB2024112738
SB2024112739
and 35 more
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 - 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 - 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU96061 - Use After Free
CVE-2024-43374		 CWE-416 High
No
No
 - 15.08.2024 SB2024081581
SB2024082362
SB2024083027
and 10 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 - 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU86378 - Resource exhaustion
CVE-2023-50868		 CWE-400 Medium
Available
No
 - 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86377 - Resource exhaustion
CVE-2023-50387		 CWE-400 Medium
Available
No
 - 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more
#VU77081 - Integer overflow
CVE-2023-33204		 CWE-190 Medium
No
No
 - 08.06.2023 SB2023060803
SB2023060810
SB2023080278
and 11 more
#VU75389 - Resource exhaustion
CVE-2023-28450		 CWE-400 Medium
No
No
 - 20.04.2023 SB2023042040
SB2023042041
SB2023042042
and 30 more
#VU69196 - Memory corruption
CVE-2022-39377		 CWE-119 Medium
No
No
 - 10.11.2022 SB2022111005
SB2022111008
SB2022112206
and 20 more


Showing elements 1 - 20 out of 2715