Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2011-3172unix2_chkpwd do not check for a valid account
- CVE-2011-0467SQL injection in SUSE studio via select parameter
- CVE-2015-0796open build service source server symlink exploitation via source patch
- CVE-2017-9286nextcloud package security issues with /srv/www/htdocs
- CVE-2017-9274osc executes spec code during "osc commit"
- CVE-2017-9271proxy credentials written to log files by zypper
- CVE-2017-9270post-auth arbitrary file write on cryptctl server
- CVE-2017-9269lack of keypinning in libzypp could lead to repository switching
- CVE-2017-9268open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions
- CVE-2017-7436libzypp accepts unsigned packages even when configured to check signatures
- CVE-2017-7435libzypp accepts unsigned 3rd party repo without warning
- CVE-2017-14804package builds could use directory traversal to write outside of target area
- CVE-2017-14798local privilege escalation in SUSE postgresql init script