SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2283-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5564 CVE-2016-3698 Upstream summary: A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:14524-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10196 CVE-2019-11023 CVE-2023-46045 Upstream summary: NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-18862 Upstream summary: maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:21016-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59432 Upstream summary: SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. […]

🟠 High   ⏱ 15–60 min  Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1458-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-25577 CVE-2023-46136 CVE-2024-34069 CVE-2019-14806 CVE-2024-49767 Upstream summary: Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2025:02203-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12224 CVE-2025-4574 CVE-2025-58160 Upstream summary: Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a […]

🟠 High   ⏱ 15–60 min  Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-27135 CVE-2019-18802 CVE-2020-11080 CVE-2023-35945 CVE-2024-28182 CVE-2018-1000168 CVE-2016-1544 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version […]

🟠 High   ⏱ 15–60 min  Last verified: 14 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:13644 (see also SUSE bugzilla) Related CVEs: CVE-2026-35091 CVE-2026-35092 Upstream summary: A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 June 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-6369 CVE-2022-1210 Upstream summary: Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of […]