Skip to content
OpenAdvisories

Vendor

openSUSE

83 known vulnerabilities.

Products

Factory 24 open build service 14 openSUSE Leap 15.1 13 Tumbleweed 9 Leap 15.1 8 openSUSE Leap 15.2 6 openSUSE Leap 15.4 4 Leap 15.2 3 openSUSE Tumbleweed 3 openbuildservice 3 openSUSE Leap 15.3 2 libeconf 2 openSUSE Factory 2 openSUSE Backports SLE-15-SP3 2 sdbootutil 1 openSUSE Backports SLE-15-SP1 1 Leap 1 obs-service-set_version 1 libsolv 1 openSUSE Leap Micro 5.2 1 Build service 1 buildservice 1 opensuse-welcome 1 travel-support-program 1 openSUSE Backports SLE-15-SP2 1 paste 1 openSUSE Backports SLE-15-SP4 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-56004

    obs-service-tar_scm: command injection via mercurial handler

    A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services

    openSUSE buildservice
  • Critical 9.8
    CVE-2021-25315

    salt-api unauthenticated remote code execution

    CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterpris…

    SUSE openSUSE Tumbleweed SUSE Linux Enterprise Server 15 SP 3 Linux PyPI