| CVE-2026-104618 |
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log
|
6.2
Moyenne
|
15 oct. 2026 |
| CVE-2026-104617 |
There are two invocations of `qrencode` to display a QR code for scanning
|
5.1
Moyenne
|
15 oct. 2026 |
| CVE-2025-53881 |
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege…
|
6.9
Moyenne
|
2 oct. 2025 |
| CVE-2025-46810 |
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the…
|
8.5
Élevée
|
2 sept. 2025 |
| CVE-2024-49505 |
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE…
|
5.3
Moyenne
|
13 nov. 2024 |
| CVE-2024-49506 |
Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of…
|
7.3
Élevée
|
13 nov. 2024 |
| CVE-2023-32183 |
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the…
|
7.8
Élevée
|
7 juil. 2023 |
| CVE-2022-31250 |
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to…
|
7.1
Élevée
|
20 juil. 2022 |
| CVE-2021-25315 |
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows…
|
9.8
Critique
|
3 mars 2021 |