| CVE-2026-104618 |
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log
|
6.2
Medium
|
Oct 15, 2026 |
| CVE-2026-104617 |
There are two invocations of `qrencode` to display a QR code for scanning
|
5.1
Medium
|
Oct 15, 2026 |
| CVE-2025-53881 |
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege…
|
6.9
Medium
|
Oct 2, 2025 |
| CVE-2025-46810 |
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the…
|
8.5
High
|
Sep 2, 2025 |
| CVE-2024-49505 |
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE…
|
5.3
Medium
|
Nov 13, 2024 |
| CVE-2024-49506 |
Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of…
|
7.3
High
|
Nov 13, 2024 |
| CVE-2023-32183 |
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the…
|
7.8
High
|
Jul 7, 2023 |
| CVE-2022-31250 |
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to…
|
7.1
High
|
Jul 20, 2022 |
| CVE-2021-25315 |
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows…
|
9.8
Critical
|
Mar 3, 2021 |