CVE-2024-49505

A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters. This issue affects MirrorCache before 1.083...

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

CVE-2023-32183

Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed...

OPENSUSE-SU-2025:15155-1 transfig-3.2.9a-3.1 on GA media

These are all security issues fixed in the transfig-3.2.9a-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15149-1 MozillaThunderbird-128.10.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

kubo-0.35.0-1.1 on GA media (moderate)

kubo-0.35.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15147-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L...

grafana-11.6.1-1.1 on GA media (moderate)

grafana-11.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15145-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2025-22870 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...

govulncheck-vulndb-0.0.20250520T172319-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250520T172319-1.1 on GA media Announcement ID: openSUSE-SU-2025:15144-1 Rating: moderate Cross-References: CVE-2025-43915 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed ...

kind-0.29.0-1.1 on GA media (moderate)

kind-0.29.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15146-1 Rating: moderate Cross-References: CVE-2025-47290 CVSS scores: CVE-2025-47290 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-47290 SUSE : 7.6...

OPENSUSE-SU-2025:15148-1 MozillaFirefox-138.0.4-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-138.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15150-1 audiofile-0.3.6-16.1 on GA media

These are all security issues fixed in the audiofile-0.3.6-16.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:01653-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01653-1 advisory. - Update to version 0.0.20250515T200012 2025-05-15T20:00:12Z jscPED-11136 GO-2025-3657 GO-2025-3670 GO-2025-3671 GO-2025-3672 GO-2025-367...

OPENSUSE-SU-2025:15151-1 libecpg6-17.5-1.1 on GA media

These are all security issues fixed in the libecpg6-17.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15154-1 python313-3.13.3-3.1 on GA media

These are all security issues fixed in the python313-3.13.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15153-1 python311-tornado6-6.5-1.1 on GA media

These are all security issues fixed in the python311-tornado6-6.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15152-1 python311-Flask-3.1.1-1.1 on GA media

These are all security issues fixed in the python311-Flask-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : postgresql13 (SUSE-SU-2025:01654-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01654-1 advisory. Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation...

SUSE SLES15 / openSUSE 15 Security Update : postgresql14 (SUSE-SU-2025:01661-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01661-1 advisory. Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for...

CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

CVE-2011-0462

Multiple cross-site scripting XSS vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service OBS before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...