🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0358-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-51774 Upstream summary: qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14353-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-45405 Upstream summary: `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-10525 CVE-2020-13849 CVE-2023-28366 CVE-2023-3592 CVE-2024-3935 CVE-2021-34434 CVE-2023-0809 Upstream summary: In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14570-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-46901 Upstream summary: Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14373-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:0322-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25626 Upstream summary: A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2246-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33394 Upstream summary: An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1571-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21506 Upstream summary: Duplicate of CVE-2024-5629. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14582-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-54661 Upstream summary: readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14479-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47887 Upstream summary: Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, […]
