openSUSE Leap 15.5

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0643-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21890 CVE-2024-21891 CVE-2024-22017 CVE-2024-21896 CVE-2024-37372 CVE-2024-22018 CVE-2024-36137 Upstream summary: The Node.js Permission Model does not clarify in the documentation that wildcards should be only […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1572-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34069 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14392-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-24788 Upstream summary: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2168-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38394 Upstream summary: ** DISPUTED ** Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0350-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45157 CVE-2023-22644 CVE-2024-39223 CVE-2024-47832 CVE-2024-9486 CVE-2024-9264 CVE-2024-10975 CVE-2024-45794  +12 more Upstream summary: A vulnerability has been identified in the way that Rancher stores vSphere's […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14513-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0793 CVE-2023-2727 CVE-2023-2728 CVE-2021-25743 CVE-2024-3177 CVE-2023-2431 Upstream summary: A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory ESSA-2024:0650 (see also SUSE bugzilla) Related CVEs: CVE-2024-3596 Upstream summary: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0328-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-42009 CVE-2024-42010 CVE-2023-47272 CVE-2023-5631 CVE-2024-42008 Upstream summary: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0149-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33664 CVE-2024-33663 Upstream summary: python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1129-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28757 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2023-52425 Upstream summary: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers […]