# cve.now: Opensuse

The newest entries naming Opensuse as an affected vendor (up to 200), of 83 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-104618](https://cve.now/CVE-2026-104618.md): sdbootutil: world-readable debug log (CVSS 6.2)
- [CVE-2026-104617](https://cve.now/CVE-2026-104617.md): sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/\<pid\>/cmdline (CVSS 5.1)
- [CVE-2026-48863](https://cve.now/CVE-2026-48863.md): Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service (CVSS 7.5)
- [CVE-2026-56004](https://cve.now/CVE-2026-56004.md): obs-service-tar\_scm: command injection via mercurial handler (CVSS 10.0)
- [CVE-2026-25701](https://cve.now/CVE-2026-25701.md): An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like (CVSS 7.0)
- [CVE-2025-53881](https://cve.now/CVE-2025-53881.md): SUSE-specific logrotate configuration allows escalation from mail user/group to root (CVSS 6.9)
- [CVE-2025-46810](https://cve.now/CVE-2025-46810.md): A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate (CVSS 8.5)
- [CVE-2024-49505](https://cve.now/CVE-2024-49505.md): XSS vulnerability found in OpenSuse MirrorCache (CVSS 5.3)
- [CVE-2024-49506](https://cve.now/CVE-2024-49506.md): Fixed temporary file path in aeon-checks allows fixing of disk encryption key (CVSS 7.3)
- [CVE-2023-32184](https://cve.now/CVE-2023-32184.md): A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user th (CVSS 7.8)
- [CVE-2023-32183](https://cve.now/CVE-2023-32183.md): Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate t (CVSS 7.8)
- [CVE-2023-22652](https://cve.now/CVE-2023-22652.md): Stack buffer overflow in "read\_file" function (CVSS 3.3)
- [CVE-2023-32181](https://cve.now/CVE-2023-32181.md): Stack buffer overflow in "econf\_writeFile" function (CVSS 3.3)
- [CVE-2022-45153](https://cve.now/CVE-2022-45153.md): saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha\_cluster.sls (CVSS 7.0)
- [CVE-2023-22643](https://cve.now/CVE-2023-22643.md): libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to \`os.system\` calls (CVSS 6.3)
- [CVE-2022-31254](https://cve.now/CVE-2022-31254.md): rmt-server-pubcloud allows to escalate from user \_rmt to root (CVSS 7.8)
- [CVE-2022-21948](https://cve.now/CVE-2022-21948.md): paste: XSS on the image upload function (CVSS 4.3)
- [CVE-2022-46163](https://cve.now/CVE-2022-46163.md): travel-support-program vulnerable to data exfiltration via Ransack query injection (CVSS 7.5)
- [CVE-2022-31253](https://cve.now/CVE-2022-31253.md): openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself (CVSS 7.1)
- [CVE-2022-31252](https://cve.now/CVE-2022-31252.md): permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() (CVSS 4.4)
- [CVE-2022-21950](https://cve.now/CVE-2022-21950.md): canna: unsafe handling of /tmp/.iroha\_unix directory (CVSS 5.3)
- [CVE-2022-31250](https://cve.now/CVE-2022-31250.md): keylime %post scriplet allows for privilege escalation from keylime user to root (CVSS 7.1)
- [CVE-2022-21946](https://cve.now/CVE-2022-21946.md): suddoers configuration for cscreen not restrictive enough (CVSS 5.3)
- [CVE-2022-21945](https://cve.now/CVE-2022-21945.md): cscreen: usage of fixed path /tmp/cscreen.debug (CVSS 5.1)
- [CVE-2021-36777](https://cve.now/CVE-2021-36777.md): login-proxy sends password to attacker-provided domain (CVSS 8.1)
- [CVE-2022-21944](https://cve.now/CVE-2022-21944.md): watchman: chown in watchman@.socket unit allows symlink attack (CVSS 7.8)
- [CVE-2021-36781](https://cve.now/CVE-2021-36781.md): parsec: dangerous 777 permissions for /run/parsec (CVSS 5.9)
- [CVE-2021-32000](https://cve.now/CVE-2021-32000.md): clone-master-clean-up: dangerous file system operations (CVSS 3.2)
- [CVE-2021-25321](https://cve.now/CVE-2021-25321.md): arpwatch: Local privilege escalation from runtime user to root (CVSS 7.8)
- [CVE-2021-25322](https://cve.now/CVE-2021-25322.md): python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root (CVSS 6.8)
- [CVE-2021-31997](https://cve.now/CVE-2021-31997.md): python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root (CVSS 6.8)
- [CVE-2021-31998](https://cve.now/CVE-2021-31998.md): inn: %post calls user owned file allowing local privilege escalation to root (CVSS 6.8)
- [CVE-2021-25317](https://cve.now/CVE-2021-25317.md): cups: ownership of /var/log/cups allows the lp user to create files as root (CVSS 3.3)
- [CVE-2021-25319](https://cve.now/CVE-2021-25319.md): virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group (CVSS 7.8)
- [CVE-2021-25315](https://cve.now/CVE-2021-25315.md): salt-api unauthenticated remote code execution (CVSS 9.8)
- [CVE-2020-8032](https://cve.now/CVE-2020-8032.md): Local privilege escalation to root due to insecure tmp file usage (CVSS 6.7)
- [CVE-2020-8027](https://cve.now/CVE-2020-8027.md): openldap uses fixed paths in /tmp (CVSS 7.3)
- [CVE-2020-8031](https://cve.now/CVE-2020-8031.md): obs: Stored XSS (CVSS 6.3)
- [CVE-2018-12475](https://cve.now/CVE-2018-12475.md): obs-service-download\_files allows downloading from localhost or intranet hosts (CVSS 6.5)
- [CVE-2020-8023](https://cve.now/CVE-2020-8023.md): Local privilege escalation from ldap to root when using OPENLDAP\_CONFIG\_BACKEND=ldap in openldap2 (CVSS 7.7)
- [CVE-2020-8025](https://cve.now/CVE-2020-8025.md): outdated entries in permissions profiles for /var/lib/pcp/tmp/\* may cause security issues (CVSS 6.1)
- [CVE-2020-8026](https://cve.now/CVE-2020-8026.md): inn: non-root owned files (CVSS 8.4)
- [CVE-2020-8014](https://cve.now/CVE-2020-8014.md): kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage (CVSS 7.7)
- [CVE-2019-3681](https://cve.now/CVE-2019-3681.md): osc: stores downloaded (supposed) RPM in network-controlled filesystem paths (CVSS 7.5)
- [CVE-2020-8019](https://cve.now/CVE-2020-8019.md): syslog-ng: Local privilege escalation from new to root in %post (CVSS 7.7)
- [CVE-2020-8024](https://cve.now/CVE-2020-8024.md): Problematic permissions in hylafax+ packaging allow escalation from uucp to other users (CVSS 5.3)
- [CVE-2020-8021](https://cve.now/CVE-2020-8021.md): unauthorized read access to files where sourceaccess is disabled via a crafted \_service file in Open Build Service (CVSS 5.3)
- [CVE-2020-8020](https://cve.now/CVE-2020-8020.md): Persistent XSS in markdown parser used by obs-server (CVSS 6.5)
- [CVE-2019-18904](https://cve.now/CVE-2019-18904.md): Migrations requests can cause DoS on rmt (CVSS 6.5)
- [CVE-2020-8017](https://cve.now/CVE-2020-8017.md): race condition on texlive-filesystem cron job allows for the deletion of unintended files (CVSS 6.2)
- [CVE-2020-8016](https://cve.now/CVE-2020-8016.md): race condition in the packaging of texlive-filesysten (CVSS 4.9)
- [CVE-2020-8015](https://cve.now/CVE-2020-8015.md): Local privilege escalation in exim package from user mail to root (CVSS 8.4)
- [CVE-2019-3696](https://cve.now/CVE-2019-3696.md): pcp: Local privilege escalation from user pcp to root through migrate\_tempdirs (CVSS 8.4)
- [CVE-2019-3695](https://cve.now/CVE-2019-3695.md): pcp: Local privilege escalation from user pcp to root (CVSS 8.4)
- [CVE-2019-18903](https://cve.now/CVE-2019-18903.md): wicked: Use-after-free when receiving invalid DHCP6 IA\_PD option (CVSS 7.5)
- [CVE-2019-18902](https://cve.now/CVE-2019-18902.md): wicked: Use-after-free when receiving invalid DHCP6 client options (CVSS 7.5)
- [CVE-2019-18897](https://cve.now/CVE-2019-18897.md): Local privilege escalation from user salt to root (CVSS 8.4)
- [CVE-2019-3698](https://cve.now/CVE-2019-3698.md): nagios cron job allows privilege escalation from user nagios to root (CVSS 5.7)
- [CVE-2018-20105](https://cve.now/CVE-2018-20105.md): yast2-rmt exposes CA private key passhrase in log-file (CVSS 4.0)
- [CVE-2018-12476](https://cve.now/CVE-2018-12476.md): obs-service-extract\_file's outfilename parameter allows to write files outside of package directory (CVSS 4.3)
- [CVE-2019-3700](https://cve.now/CVE-2019-3700.md): yast: Fallback to DES without configuration in /etc/login.def (CVSS 2.9)
- [CVE-2019-3699](https://cve.now/CVE-2019-3699.md): Local privilege escalation from user privoxy to root (CVSS 7.7)
- [CVE-2019-3697](https://cve.now/CVE-2019-3697.md): Local privilege escalation from user gnump3d to root (CVSS 7.7)
- [CVE-2019-3694](https://cve.now/CVE-2019-3694.md): Local privilege escalation from munin to root in the packaging of munin (CVSS 7.7)
- [CVE-2019-3693](https://cve.now/CVE-2019-3693.md): Local privilege escalation from user wwwrun to root in the packaging of mailman (CVSS 7.7)
- [CVE-2019-3692](https://cve.now/CVE-2019-3692.md): Local privilege escalation from user news to root in the packaging of inn (CVSS 7.7)
- [CVE-2019-3691](https://cve.now/CVE-2019-3691.md): Local privilege escalation from user munge to root (CVSS 7.7)
- [CVE-2019-18899](https://cve.now/CVE-2019-18899.md): apt-cacher-ng insecure use of /run/apt-cacher-ng (CVSS 6.2)
- [CVE-2019-18898](https://cve.now/CVE-2019-18898.md): trousers: Local privilege escalation from tss to root (CVSS 7.7)
- [CVE-2018-12479](https://cve.now/CVE-2018-12479.md): Request controller allows to create requests with arbitrary request IDs (CVSS 6.5)
- [CVE-2018-12478](https://cve.now/CVE-2018-12478.md): obs-service-replace\_using\_package\_version allows to specify arbitrary input files (CVSS 4.8)
- [CVE-2018-12477](https://cve.now/CVE-2018-12477.md): obs-service-refresh\_patches can be tricked into deleting '..' or other unrelated directories (CVSS 3.5)
- [CVE-2018-12474](https://cve.now/CVE-2018-12474.md): Crafted service parameters allows to induce unexpected behaviour in obs-service-tar\_scm (CVSS 5.4)
- [CVE-2018-12473](https://cve.now/CVE-2018-12473.md): path traversal in obs-service-tar\_scm (CVSS 3.1)
- [CVE-2018-12467](https://cve.now/CVE-2018-12467.md): delete package via link exploit in open buildservice (CVSS 6.0)
- [CVE-2018-12466](https://cve.now/CVE-2018-12466.md): openbuildservice allowed deleting packages via project links (CVSS 4.4)
- [CVE-2014-0594](https://cve.now/CVE-2014-0594.md): CSRF protection incorrectly disabled (CVSS 8.8)
- [CVE-2014-0593](https://cve.now/CVE-2014-0593.md): sed command injection (CVSS 7.8)
- [CVE-2013-3703](https://cve.now/CVE-2013-3703.md): No write permission check in change\_role command (CVSS 8.8)
- [CVE-2018-7689](https://cve.now/CVE-2018-7689.md): Open Build Service arbitrary package modification (CVSS 7.1)
- [CVE-2018-7688](https://cve.now/CVE-2018-7688.md): Open Build Service accepts arbitrary reviews (CVSS 7.1)
- [CVE-2011-3178](https://cve.now/CVE-2011-3178.md): openbuildservice webui code injection (CVSS 8.1)
- [CVE-2017-5188](https://cve.now/CVE-2017-5188.md): OBS worker VM escape via relative symbolic links (CVSS 5.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/opensuse
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.