🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-22513 Upstream summary: djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1031-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0153-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-53263 Upstream summary: Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0030-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-54662 Upstream summary: Dante 1.4.0 through 1.4.3 (fixed in 1.4.4) has incorrect access control for some sockd.conf configurations involving socksmethod. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6963 (see also SUSE bugzilla) Related CVEs: CVE-2024-6655 Upstream summary: A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1757-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8178 CVE-2014-8179 CVE-2014-9356 CVE-2014-9357 CVE-2015-3629 CVE-2015-3630 CVE-2019-14271 CVE-2020-15257 +12 more Upstream summary: Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3576-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5261 CVE-2024-3044 Upstream summary: Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing LibreOffice functionality […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14620-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-56826 CVE-2018-18088 Upstream summary: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1198-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-41081 CVE-2024-46544 Upstream summary: Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6757 (see also SUSE bugzilla) Related CVEs: CVE-2024-7383 Upstream summary: A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to […]
