🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0158-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-32784 Upstream summary: In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1351-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46045 Upstream summary: Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1351-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46045 Upstream summary: Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14697-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-34169 Upstream summary: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0183-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33461 Upstream summary: iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2871-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48174 Upstream summary: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:2947-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37434 CVE-2022-41325 CVE-2023-5217 Upstream summary: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3661-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31629 Upstream summary: In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:4181-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16873 CVE-2021-28235 CVE-2023-47108 CVE-2023-48795 CVE-2022-41723 CVE-2018-16874 CVE-2018-16875 CVE-2018-16886 +3 more Upstream summary: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command […]
