SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3813-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-23913 CVE-2022-27777 Upstream summary: There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0851-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51441 CVE-2012-5784 CVE-2014-3596 CVE-2018-8032 Upstream summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2023:577-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33460 CVE-2022-24795 Upstream summary: There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash. […]

🟠 High   ⏱ 15–60 min  Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2151-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a […]

🟠 High   ⏱ 15–60 min  Last verified: 22 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02809-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32650 CVE-2022-31394 Upstream summary: Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When […]

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56201 Upstream summary: Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-36660 Upstream summary: The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption. Table of contents Symptom & Impact Environment & Reproduction […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2024:1637-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30608 Upstream summary: sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable […]

🔴 Critical   ⏱ 15–90 min  Last verified: 11 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1119-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15052 CVE-2021-29428 CVE-2023-35947 CVE-2023-35946 CVE-2021-29429 CVE-2021-32751 CVE-2019-16370 Upstream summary: The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. […]

🟠 High   ⏱ 15–60 min  Last verified: 10 May 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:10953 (see also SUSE bugzilla) Related CVEs: CVE-2024-53899 Upstream summary: virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when […]