Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-59674

LPE from suricata user to root due to chown in %post in suricata packaging

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Opensuse Tumbleweed
CVE-2026-41051

csync2 uses insecure temporary directories when compiled with C99 or later

csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Opensuse Tumbleweed
CVE-2023-32190

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Opensuse Tumbleweed
CVE-2025-53882

The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Opensuse Tumbleweed
CVE-2024-49504

grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Suse
Products
Opensuse Tumbleweed
CVE-2025-62875

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Openbsd Opensmtpd Opensuse and 1 more
Products
Opensmtpd Opensmtpd Tumbleweed and 2 more
CVE-2024-49505

XSS vulnerability found in OpenSuse MirrorCache

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  REGEX and P parameters. This issue affects MirrorCache before 1.083.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse Suse
Products
Mirrorcache Opensuse Tumbleweed