Opensuse

Vendor:

First CVE: May 2, 2007 · Active for 19 years

1,466
Total CVEs
More Total CVEs than 92% of tracked products
97.7
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 17% of tracked products
2.9%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Opensuse over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 2, 2007
19 years ago
Most Recent CVE
Jul 16, 2021
1,835 days ago

CVE Severity & Scoring

Opensuse1,466 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local100 (6.8%)
Network409 (27.9%)
Unknown956 (65.2%)
Physical0 (0.0%)
Adjacent Network1 (0.1%)
Attack Complexity
Low472 (32.2%)
High38 (2.6%)
Unknown956 (65.2%)
User Interaction
None258 (17.6%)
Unknown956 (65.2%)
Required252 (17.2%)
Privileges Required
Low59 (4.0%)
High5 (0.3%)
None446 (30.4%)
Unknown956 (65.2%)

Top CVEs

Signals from CVEs in this product scope (1466 CVEs).

1,466 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2014-6271CRITICAL
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
CVE-2014-0160HIGH
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform
Apr 7, 20147.599YESYES
CVE-2012-1823CRITICAL
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign)
May 11, 20129.899YESYES
CVE-2016-4117CRITICAL
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
May 11, 20169.898YESYES
CVE-2016-3714HIGH
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to exec
May 5, 20168.498YESYES
CVE-2015-5119CRITICAL
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows
Jul 8, 20159.898YESYES
CVE-2015-3113CRITICAL
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attack
Jun 23, 20159.898YESYES
CVE-2015-0313CRITICAL
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta
Feb 2, 20159.898YESYES
CVE-2014-7169CRITICAL
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES
CVE-2014-0497CRITICAL
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta
Feb 5, 20149.898YESYES
View all 1,466 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (1466 CVEs).

CISA KEV
43 CVEs
2.9% of CVEs· Bottom 1%
Metasploit
47 CVEs
3.2% of CVEs· Bottom 1%
Nuclei
6 CVEs
0.4% of CVEs· Bottom 1%
ExploitDB
103 CVEs
7.0% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (1466 CVEs).

Media Mentions

Signals from CVEs in this product scope (1466 CVEs).

Top CNAs Publishing CVEs For Opensuse

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2010.07.2817.22.9%00
2007.05.1017.22.9%00
13.27006.87.6%1834
13.16816.67.1%1738
12.32616.29.4%826
12.22916.96.1%316
12.12387.05.1%78
11.42906.911.8%1332
11.3756.29.6%519
11.2656.413.0%820
11.1476.213.1%510
11.0416.19.0%16
10.3-11.126.32.6%00
10.3275.78.9%03
10.2116.19.1%00
10.016.84.3%00