suse

1,208 tracked vulnerabilities.

CVE-2024-49503 LOW
SUSE manager <5.0.15-150600.3.10.2 - XSS
Nov 28, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-49502 LOW
SUSE Manager Server Module < 4.3.42-150400.3.52.1 - Cross-Site Scripting in Setup Wizard HTTP Proxy Credentials Pane
Nov 28, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-22038 HIGH
obs-scm-bridge - Info Disclosure/DoS
Nov 28, 2024
CVSS 7.3
EPSS 0.00
CVE-2024-22037 MEDIUM
uyuni-server-attestation - Info Disclosure
Nov 28, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-49504 HIGH
openSUSE Tumbleweed < 2.12-28.1 - Unauthenticated File Access via GRUB Shell
Nov 13, 2024
EPSS 0.00
CVE-2024-46956 HIGH
Ghostscript < 10.04.0 - Out-of-bounds Read in filenameforall
Nov 10, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-46955 MEDIUM
Ghostscript < 10.04.0 - Out-of-bounds Read in Indexed Color Space Handling
Nov 10, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-46953 HIGH
Ghostscript < 10.04.0 - Integer Overflow in Output Filename Parsing
Nov 10, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-46951 HIGH
Artifex Ghostscript < 10.04.0 - Remote Code Execution via Uninitialized Pointer in Pattern Color Space
Nov 10, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-22034 MEDIUM
SUSE Linux Enterprise Desktop 15 SP5 - Arbitrary Configuration Manipulation via .osc Special Files
Oct 16, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-22033 MEDIUM
SUSE Package Hub 15 SP5 < 0.2.1-bp155.3.3.1 - OS Command Injection via obs-service-download_url Configuration
Oct 16, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-22032 MEDIUM
Rancher RKE1 - Plaintext Secret Exposure During Reconciliation
Oct 16, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-22030 HIGH
Rancher 2.7.0-2.9.2 URL Certificate Validation - Man-in-the-Middle
Oct 16, 2024
CVSS 8.0
EPSS 0.00
CVE-2024-22029 HIGH
SUSE Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 - Insecure Permissions in Tomcat Packaging
Oct 16, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-6387 HIGH
OpenSSH - DoS
Jul 01, 2024
CVSS 8.1
EPSS 0.63
CVE-2024-23301 MEDIUM
Relax-and-Recover < 2.7 - Incorrect Default Permissions in initrd
Jan 12, 2024
CVSS 5.5
EPSS 0.00
CVE-2023-32199 MEDIUM
Rancher Manager - Privilege Escalation
Oct 29, 2025
CVSS 4.3
EPSS 0.00
CVE-2023-32197 MEDIUM
Rancher 2.7.0-2.7.13 and 2.8.0-2.8.4 - Privilege Escalation via RoleTemplate External Setting
Apr 16, 2025
CVSS 6.6
EPSS 0.00
CVE-2023-32189 MEDIUM
Product <Version - Local Privilege Escalation
Oct 16, 2024
CVSS 5.9
EPSS 0.00
CVE-2023-32196 MEDIUM
Rancher 2.7.0-2.7.13 and 2.8.0-2.8.4 - Privilege Escalation via RoleTemplate External Check Bypass
Oct 16, 2024
CVSS 6.6
EPSS 0.00
CVE-2023-32194 HIGH
Rancher 2.6.0-2.6.13, 2.7.0-2.7.9, 2.8.0-2.8.1 - Improper Privilege Management in Global Role Assignment
Oct 16, 2024
CVSS 7.2
EPSS 0.00
CVE-2023-32193 HIGH
rancher/norman <0.0.0-20240207153100-3bb70b772b52 - Unauthenticated Cross-Site Scripting via Public API Endpoint
Oct 16, 2024
CVSS 8.3
EPSS 0.00
CVE-2023-32192 HIGH
rancher/apiserver < 0.0.0-20240207153957-4fd7d821d952 - Unauthenticated Cross-Site Scripting via Public API Endpoint
Oct 16, 2024
CVSS 8.3
EPSS 0.00
CVE-2023-32191 CRITICAL
RKE 1.4.18-1.4.18, 1.5.9-1.5.9 - Insecure Storage of Sensitive Information in Cluster State ConfigMap
Oct 16, 2024
CVSS 9.9
EPSS 0.00
CVE-2023-32190 HIGH
openSUSE Tumbleweed < 0.26-37.1 - Arbitrary File Permission Manipulation via mlocate %post Script
Oct 16, 2024
CVSS 7.8
EPSS 0.00
Products
linux_enterprise_server 474 linux_enterprise_desktop 461 linux_enterprise_software_development_kit 296 suse_linux 208 suse_linux_enterprise_server 129 linux_enterprise_workstation_extension 105 linux_enterprise 97 suse_linux_enterprise_desktop 81 linux_enterprise_real_time_extension 58 linux_enterprise_debuginfo 54 rancher 50 package_hub 39 suse_linux_enterprise_software_development_kit 35 openstack_cloud 33 linux_enterprise_high_availability_extension 28 manager 22 studio_onsite 22 linux_enterprise_sdk 19 manager_proxy 19 suse_linux_workstation_extension 17 linux_enterprise_point_of_sale 12 manager_server 12 linux_enterprise_high_performance_computing 9 openSUSE Tumbleweed 9 neuvector 8 SUSE Manager Server Module 4.3 7 caas_platform 7 linux_enterprise_real_time 7 linux_enterprise_server_for_sap 6 suse_email_server 6
Quick Filters
Critical CVEs With Exploits In CISA KEV