OT
Product
openSUSE Tumbleweed
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 6Low 0
Watch
Add openSUSE Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22033 | 6.3 | Oct 16 | obs-service-download_url is vulnerable to argument injection Affected: ? before 0.2.1-1.1 |
| CVE-2024-49505 | 6.1 | Nov 13 | XSS vulnerability found in OpenSuse MirrorCache Affected: before 1.0.83 |
| CVE-2025-62875 | 5.5 | Nov 20 | Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock Affected: ? before 7.8.0p0-1.1 |
| CVE-2024-22034 | 5.5 | Oct 16 | Crafted projects can overwrite special files in the .osc config directory Affected: ? before 1.9.0-1.1 |
| CVE-2026-41051 | 5.0 | May 13 | csync2 uses insecure temporary directories when compiled with C99 or later Affected: ? before 2.0+git.1600444747.83b3644-3.1 |
| CVE-2025-53882 | 4.4 | Jul 23 | The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess Affected: ? before 3.3.10-2.1 |
Showing 6