openSUSE Leap 15.5

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3661-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31629 Upstream summary: In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:4181-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16873 CVE-2021-28235 CVE-2023-47108 CVE-2023-48795 CVE-2022-41723 CVE-2018-16874 CVE-2018-16875 CVE-2018-16886  +3 more Upstream summary: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30861 Upstream summary: Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3482-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-23559 Upstream summary: In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:8849 (see also SUSE bugzilla) Related CVEs: CVE-2023-45539 CVE-2023-40225 Upstream summary: HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0350-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-38037 Upstream summary: ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2344-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34153 CVE-2023-5341 CVE-2023-34474 CVE-2023-34151 Upstream summary: A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2776-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-2004 Upstream summary: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4439-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-38252 CVE-2023-38253 Upstream summary: An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50981 CVE-2023-50980 Upstream summary: ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER […]