← Back

Opensuse

opensuse

3,271 CVEs • 50 products

Products (50)

Click to collapse
Toggle
Leap
leap
Opensuse
opensuse
Backports
backports
Evergreen
evergreen
Libsolv
libsolv
Factory
factory
Supportutils
supportutils
Libzypp
libzypp
Tumbleweed
tumbleweed
Zypper
zypper
Openldap2
openldap2
Osc
osc
Cryptctl
cryptctl
Munge
munge
Wicked
wicked
Pcp
pcp
Rmt Server
rmt-server
Cscreen
cscreen
Libeconf
libeconf
Libstorage
libstorage
Libstorage Ng
libstorage-ng
Sysconfig
sysconfig
Tar Scm
tar_scm
Package Hub
package_hub
Yast2 Printer
yast2-printer
Munin
munin
Autoyast2
autoyast2
Hylafax+
hylafax+
Cyrus Sasl
cyrus-sasl
Inn
inn
Canna
canna
Leap Micro
leap_micro
Paste
paste
Welcome
welcome
Mirrorcache
mirrorcache

CVEs (3,271)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Gnu
Opensuse
2Gnutls
Leap
May 13, 2026
Mar 24, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509...Show more
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.Show less
5Clusterlabs
OpensuseOpensuse Project+2 more
7Enterprise Linux High Availability
Enterprise Linux Resilient StorageLeap+4 more
May 13, 2026
Mar 24, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
3Fedoraproject
Jasper ProjectOpensuse
3Fedora
JasperLeap
May 13, 2026
Mar 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
4Fedoraproject
Jasper ProjectOpensuse+1 more
6Fedora
JasperLeap+3 more
May 13, 2026
Mar 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
2Imagemagick
Opensuse
2Imagemagick
Leap
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted fil...Show more
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.Show less
2Imagemagick
Opensuse
2Imagemagick
Leap
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE f...Show more
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.Show less
3Fedoraproject
OpensusePercona
3Fedora
LeapXtrabackup
May 13, 2026
Mar 23, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information...Show more
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.Show less
2Opensuse
Sane Backends Project
2Leap
Sane Backends
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
2Opensuse
Postfixadmin Project
2Leap
Postfixadmin
May 13, 2026
Mar 20, 2017
N/A· v4
2.7 LOW· v3
3.5 LOW· v2
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
4Canonical
ImagemagickOpensuse+1 more
9Imagemagick
LeapOpensuse+6 more
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
4Canonical
ImagemagickOpensuse+1 more
8Imagemagick
LeapOpensuse+5 more
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
4Canonical
ImagemagickOpensuse+1 more
9Imagemagick
LeapOpensuse+6 more
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
4Canonical
ImagemagickOpensuse+1 more
10Imagemagick
LeapLeap+7 more
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
4Canonical
ImagemagickOpensuse+1 more
10Imagemagick
LeapOpensuse+7 more
May 13, 2026
Mar 20, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
5Canonical
ImagemagickOpensuse+2 more
11Imagemagick
LeapLeap+8 more
May 13, 2026
Mar 20, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
5Canonical
ImagemagickOpensuse+2 more
11Imagemagick
LeapLeap+8 more
May 13, 2026
Mar 20, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
5Canonical
ImagemagickOpensuse+2 more
10Imagemagick
LeapOpensuse+7 more
May 13, 2026
Mar 20, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
4Canonical
ImagemagickOpensuse+1 more
8Imagemagick
LeapOpensuse+5 more
May 13, 2026
Mar 20, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
4Canonical
ImagemagickOpensuse+1 more
9Imagemagick
LeapOpensuse+6 more
May 13, 2026
Mar 20, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
4Canonical
ImagemagickOpensuse+1 more
8Imagemagick
LeapOpensuse+5 more
May 13, 2026
Mar 20, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."