Vendor
openSUSE
3,295 known vulnerabilities in products by openSUSE, 61 of them actively exploited (CISA KEV).
Key figures
3,295
Vulnerabilities
61
Actively exploited (KEV)
4
Used by ransomware
308
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability In CISA KEV | 9.3 | |
| Critical | CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability In CISA KEVRansomware | 5.5 | |
| Critical | CVE-2015-3306 | ProFTPD Improper Access Control Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity In CISA KEV | 9.8 | |
| Critical | CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2010-0840 | Oracle JRE Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-12641 | Roundcube Webmail Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2010-4344 | Exim Heap-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability In CISA KEV | 9.6 | |
| Critical | CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability In CISA KEV | 9.8 |
News
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agenciesthehackernews,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| openSUSE Leap | 1,898 | 19 |
| OpenSUSE | 1,456 | 45 |
| OpenSUSE Backports SLE | 326 | 3 |
| Opensuse Backports | 97 | 0 |
| openSUSE Evergreen | 44 | 10 |
| openSUSE Open Build Service | 35 | 0 |
| openSUSE Factory | 32 | 0 |
| openSUSE Libsolv | 14 | 0 |
| Opensuse Leap 15.1 | 13 | 0 |
| openSUSE Tumbleweed | 12 | 1 |
| Leap 15.1 | 8 | 0 |
| openSUSE libzypp | 7 | 0 |
| Opensuse Leap 15.2 | 6 | 0 |
| openSUSE Supportutils | 6 | 0 |
| Opensuse Leap 15.4 | 4 | 0 |
| Leap 15.2 | 3 | 0 |
| Openbuildservice | 3 | 0 |
| Openldap2 | 3 | 0 |
| Opensuse Tumbleweed | 3 | 0 |
| Zypper | 3 | 0 |