SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 2 September 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9114 (see also SUSE bugzilla) Related CVEs: CVE-2025-48734 CVE-2019-10086 Upstream summary: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:01888-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-47711 CVE-2025-47712 CVE-2021-3716 Upstream summary: There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If […]

🟠 High   ⏱ 15–60 min  Last verified: 27 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0198-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-63757 CVE-2025-59728 CVE-2024-7055 CVE-2023-51794 CVE-2023-50010 CVE-2023-49502 CVE-2024-31578 CVE-2023-51793  +12 more Upstream summary: Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2022-4303 CVE-2023-41105 CVE-2025-12781 CVE-2025-1795 Upstream summary: The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes […]

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10407 (see also SUSE bugzilla) Related CVEs: CVE-2025-47273 CVE-2024-6345 Upstream summary: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in […]

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0327-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68156 CVE-2025-47913 CVE-2025-11065 CVE-2025-58058 Upstream summary: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, […]

🔴 Critical   ⏱ 15–90 min  Last verified: 15 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:2975-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12527 CVE-2020-15810 CVE-2020-15811 CVE-2025-62168 CVE-2025-59362 CVE-2023-5824 CVE-2024-25111 CVE-2024-25617  +12 more Upstream summary: An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication […]

🟠 High   ⏱ 15–60 min  Last verified: 11 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:3344 (see also SUSE bugzilla) Related CVEs: CVE-2025-30204 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2023-30551 CVE-2024-6104 CVE-2023-45288 CVE-2023-33199  +1 more Upstream summary: golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 […]

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0191-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40577 CVE-2025-47908 Upstream summary: Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests […]

🟠 High   ⏱ 15–60 min  Last verified: 8 August 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0668 (see also SUSE bugzilla) Related CVEs: CVE-2025-68615 CVE-2018-18065 CVE-2020-15862 CVE-2015-5621 CVE-2022-44792 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806  +8 more Upstream summary: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 […]