suse

1,226 tracked vulnerabilities.

CVE-2025-23391 CRITICAL
Rancher 2.8.0-2.8.13, 2.9.0-2.9.7, 2.10.0-2.10.3 - Authenticated Privilege Escalation via Administrator Password Change
Apr 11, 2025
CVSS 9.1
EPSS 0.00
CVE-2025-23389 HIGH
Rancher 2.8.0-2.8.12, 2.9.0-2.9.6, 2.10.0-2.10.2 - Unauthenticated Identity Impersonation via SAML Authentication
Apr 11, 2025
CVSS 8.4
EPSS 0.00
CVE-2025-23388 HIGH
Rancher 2.8.0-2.8.12, 2.9.0-2.9.6, 2.10.0-2.10.2 - Denial of Service via Stack-based Buffer Overflow
Apr 11, 2025
CVSS 8.2
EPSS 0.01
CVE-2025-23387 MEDIUM
Rancher 2.8.0-2.8.12, 2.9.0-2.9.6, 2.10.0-2.10.2 - Unauthenticated Sensitive Info Exposure via CLI
Apr 11, 2025
CVSS 5.3
EPSS 0.01
CVE-2025-23386 HIGH
openSUSE Tumbleweed gerbera <2.5.0-1.1 - Privilege Escalation
Apr 10, 2025
CVSS 7.8
EPSS 0.00
CVE-2024-58269 MEDIUM
Rancher < 0.0.0-20251013203444-50dc516a19ea - Sensitive Information Exposure in Audit Logs
Oct 29, 2025
CVSS 4.3
EPSS 0.00
CVE-2024-58267 HIGH
Rancher 2.9.0-2.12.0 - SAML Authentication Token Theft via Phishing Attack
Oct 02, 2025
CVSS 8.0
EPSS 0.00
CVE-2024-58260 HIGH
Rancher 2.9.0-2.9.11, 2.10.0-2.10.9, 2.11.0-2.11.5, 2.12.0-2.12.1 - DoS via Username Field
Oct 02, 2025
CVSS 7.6
EPSS 0.00
CVE-2024-58259 HIGH
Rancher 2.9.0-2.9.10, 2.10.0-2.10.8, 2.11.0-2.11.4, 2.12.0 - Denial of Service via Unrestricted Request Body Size
Sep 02, 2025
CVSS 8.2
EPSS 0.00
CVE-2024-52284 HIGH
Rancher Fleet BundleDeployment - Information Disclosure via Helm Values
Sep 02, 2025
CVSS 7.7
EPSS 0.00
CVE-2024-52281 HIGH
Rancher 2.9.0-2.9.3 - Stored Cross-Site Scripting via Cluster Description Field
Apr 16, 2025
CVSS 8.9
EPSS 0.01
CVE-2024-22036 CRITICAL
Rancher 2.7.0-2.7.15, 2.8.0-2.8.8, 2.9.0-2.9.2 - Privilege Escalation via Chroot Escape
Apr 16, 2025
CVSS 9.1
EPSS 0.01
CVE-2024-52280 HIGH
SUSE rancher <c744f0b - Info Disclosure
Apr 11, 2025
CVSS 7.7
EPSS 0.00
CVE-2024-52282 MEDIUM
SUSE Rancher <2.8.10-2.9.4 - Info Disclosure
Apr 11, 2025
CVSS 6.2
EPSS 0.00
CVE-2024-12087 MEDIUM
rsync < 3.3.0 - Path Traversal via --inc-recursive Symlink Handling
Jan 14, 2025
CVSS 6.5
EPSS 0.02
CVE-2024-12086 MEDIUM
rsync < 3.3.0 - Arbitrary File Read via Checksum Manipulation
Jan 14, 2025
CVSS 6.1
EPSS 0.02
CVE-2024-12085 HIGH
rsync < 3.3.0 - Information Disclosure via Checksum Length Manipulation
Jan 14, 2025
CVSS 7.5
EPSS 0.09
CVE-2024-52283 MEDIUM
SUSE hackweek < 8d2b6bda67bd0f1914cb0851b8ae71b73e26b156 - Stored Cross-Site Scripting
Nov 28, 2024
CVSS 5.7
EPSS 0.00
CVE-2024-49503 LOW
SUSE manager <5.0.15-150600.3.10.2 - XSS
Nov 28, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-49502 LOW
SUSE Manager Server Module < 4.3.42-150400.3.52.1 - Cross-Site Scripting in Setup Wizard HTTP Proxy Credentials Pane
Nov 28, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-22038 HIGH
obs-scm-bridge - Info Disclosure/DoS
Nov 28, 2024
CVSS 7.3
EPSS 0.00
CVE-2024-22037 MEDIUM
uyuni-server-attestation - Info Disclosure
Nov 28, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-49504 HIGH
openSUSE Tumbleweed < 2.12-28.1 - Unauthenticated File Access via GRUB Shell
Nov 13, 2024
EPSS 0.00
CVE-2024-46956 HIGH
Ghostscript < 10.04.0 - Out-of-bounds Read in filenameforall
Nov 10, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-46955 MEDIUM
Ghostscript < 10.04.0 - Out-of-bounds Read in Indexed Color Space Handling
Nov 10, 2024
CVSS 5.5
EPSS 0.00
Products
linux_enterprise_server 474 linux_enterprise_desktop 461 linux_enterprise_software_development_kit 296 suse_linux 208 suse_linux_enterprise_server 129 linux_enterprise_workstation_extension 105 linux_enterprise 97 suse_linux_enterprise_desktop 81 linux_enterprise_real_time_extension 58 linux_enterprise_debuginfo 54 rancher 53 package_hub 39 suse_linux_enterprise_software_development_kit 35 openstack_cloud 33 linux_enterprise_high_availability_extension 28 manager 22 studio_onsite 22 linux_enterprise_sdk 19 manager_proxy 19 suse_linux_workstation_extension 17 Rancher 15 linux_enterprise_point_of_sale 12 manager_server 12 linux_enterprise_high_performance_computing 9 openSUSE Tumbleweed 9 neuvector 8 SUSE Manager Server Module 4.3 7 caas_platform 7 linux_enterprise_real_time 7 linux_enterprise_server_for_sap 6
Quick Filters
Critical CVEs With Exploits In CISA KEV