Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
OpensuseLibzypp*

3 matches found

CVE
CVE•added 2020/01/24 3:15 p.m.•154 views

CVE-2019-18900

CVE-2019-18900 affects libzypp in SUSE CaaS Platform 3.0 and SUSE Linux Enterprise Server 12/15, where an incorrect default-permissions issue could allow local attackers to read a cookie store used by libzypp and expose private cookies. Affected versions include: SUSE CaaS Platform 3.0 libzypp &l...

4CVSS3.4AI score0.00301EPSS
CVE
CVE•added 2018/08/31 3:0 p.m.•77 views

CVE-2018-7685

The CVE-2018-7685 issue affects libzypp (and related components) used by openSUSE/SUSE packaging. Description: decoupled download and installation steps in libzypp before 17.5.0 could leave a corrupted RPM in the cache, and a subsequent installation could proceed without displaying the corrupted ...

7.8CVSS5.5AI score0.00286EPSS
CVE
CVE•added 4 days ago•48 views

CVE-2026-25707

Summary of vulnerability (CVE-2026-25707) : A relative path traversal in libzypp’s repository metadata processing (prior to version 17.38.10) could allow remote repository authors to overwrite local files, potentially leading to denial of service or privilege escalation. Connected advisories indi...

8.8CVSS5.8AI score0.006EPSS