Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-58259Rancher affected by unauthenticated Denial of Service
- CVE-2024-52284Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
- CVE-2025-46809Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs
- CVE-2025-46811SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint
- CVE-2025-53882The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess
- CVE-2025-23393Reflected XSS in spacewalk-java
- CVE-2025-23392Reflected XSS in SystemsController.java in spacewalk-java
- CVE-2025-23394daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root
- CVE-2025-46802Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen
- CVE-2023-32197Rancher's External RoleTemplates can lead to privilege escalation
- CVE-2024-22036Rancher Remote Code Execution via Cluster/Node Drivers
- CVE-2024-52281Stored Cross-site Scripting vulnerability in Rancher UI
- CVE-2024-52280Users can issue watch commands for arbitrary resources
- CVE-2024-52282Rancher Helm Applications may have sensitive values leaked
- CVE-2025-23387Rancher's SAML-based login via CLI can be denied by unauthenticated users
- CVE-2025-23388Unauthenticated stack overflow in /v3-public/authproviders API
- CVE-2025-23389Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login
- CVE-2025-23391Rancher: Restricted Administrator can change Administrator's passwords
- CVE-2025-23386gerbera: Privilege escalation from user gerbera to root because of insecure %post script
- CVE-2024-22037Database password leaked by systemd uyuni-server-attestation service
- CVE-2024-22038DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge
- CVE-2024-49502Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web
- CVE-2024-49503Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web
- CVE-2024-52283Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a certain project
- CVE-2024-49504grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images
- CVE-2022-45157Exposure of vSphere's CPI and CSI credentials in Rancher
- CVE-2023-32189Insecure handling SSH key in SUSE Manager when bootstrapping new clients
- CVE-2024-22034Crafted projects can overwrite special files in the .osc config directory
- CVE-2024-22033obs-service-download_url is vulnerable to argument injection
- CVE-2024-22032Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec