opensuse project leap

Name: opensuse project leap
Brand: opensuse project

productUS

cpe:2.3:o:opensuse_project:leap:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

6critical14high14medium1low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-6542US	critical9.8	21.8% (98th)	Exploit	no fix	2017-03-27	= 42.1
CVE-2016-10048US	high7.5	6.53% (94th)	—	no fix	2017-03-23	= 42.1
CVE-2014-9846US	critical9.8	4.85% (92nd)	—	no fix	2017-03-20	= 42.1
CVE-2014-9847US	critical9.8	4.58% (92nd)	—	no fix	2017-03-20	= 42.1
CVE-2016-9961US	critical9.8	4.36% (91st)	—	no fix	2017-06-06	= 42.1
CVE-2014-9843US	critical9.8	3.93% (90th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9841US	critical9.8	3.93% (90th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9848US	high7.5	3.73% (90th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9851US	high7.5	3.70% (90th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9850US	high7.5	3.62% (89th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9849US	high7.5	3.62% (89th)	—	no fix	2017-03-20	= 42.1
CVE-2014-9842US	high7.5	3.62% (89th)	—	no fix	2017-03-20	= 42.1
CVE-2016-9436US	medium6.5	3.34% (89th)	—	no fix	2017-01-20	= 42.1
CVE-2016-9435US	medium6.5	3.34% (89th)	—	no fix	2017-01-20	= 42.1
CVE-2016-7797US	high7.5	3.25% (88th)	—	no fix	2017-03-24	= 42.1
CVE-2016-1254US	high7.5	3.00% (87th)	—	no fix	2017-12-05	= 42.1
CVE-2016-9959US	high7.8	2.33% (83rd)	—	no fix	2017-04-12	= 42.1
CVE-2016-9958US	high7.8	2.33% (83rd)	—	no fix	2017-04-12	= 42.1
CVE-2015-3138US	high7.5	2.28% (83rd)	—	no fix	2017-09-28	= 42.1
CVE-2016-9556US	medium5.5	2.27% (83rd)	—	no fix	2017-03-23	= 42.1
CVE-2015-5221US	medium5.5	2.19% (82nd)	—	no fix	2017-07-25	= 42.1
CVE-2016-5316US	medium6.5	2.17% (82nd)	—	no fix	2017-01-20	= 42.1
CVE-2014-9844US	medium5.5	2.05% (81st)	—	no fix	2017-03-20	= 42.1
CVE-2016-10068US	medium5.5	1.97% (80th)	—	no fix	2017-03-02	= 42.1
CVE-2016-10069US	medium5.5	1.96% (80th)	—	no fix	2017-03-02	= 42.1
CVE-2016-5317US	medium6.5	1.95% (80th)	—	no fix	2017-01-20	= 42.1
CVE-2014-9845US	medium5.5	1.95% (80th)	—	no fix	2017-03-20	= 42.1
CVE-2015-5203US	medium5.5	1.94% (80th)	—	no fix	2017-08-02	= 42.1
CVE-2016-9957US	high7.8	1.93% (80th)	—	no fix	2017-04-12	= 42.1
CVE-2015-8010US	medium6.1	1.49% (74th)	—	no fix	2017-03-27	= 42.1
CVE-2017-5938US	medium6.1	1.32% (71st)	—	no fix	2017-03-15	= 42.1
CVE-2015-5218US	low2.1	0.61% (49th)	—	no fix	2015-11-09	= 42.1
CVE-2017-17806US	high7.8	0.56% (46th)	—	no fix	2017-12-20	= 42.3
CVE-2016-9960US	medium5.5	0.53% (45th)	—	no fix	2017-06-06	= 42.1
CVE-2017-17805US	high7.8	0.44% (38th)	—	no fix	2017-12-20	= 42.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer11 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-399CWE-3992 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-189CWE-1891 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan