SLES 16

🟠 High   ⏱ 15–60 min  Last verified: 18 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4515 CVE-2014-7204 Upstream summary: A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-37533 Upstream summary: Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect […]

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:23139 (see also SUSE bugzilla) Related CVEs: CVE-2025-12105 CVE-2025-14523 CVE-2025-32049 CVE-2026-1760 CVE-2026-2708 CVE-2026-1536 CVE-2026-1761 CVE-2025-11021  +12 more Upstream summary: A flaw was found in the asynchronous message queue handling of the libsoup […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-4453 CVE-2016-8637 Upstream summary: dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs […]

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11988 Upstream summary: Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0461 Upstream summary: /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite […]

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2044-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25647 Upstream summary: The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead […]

🔴 Critical   ⏱ 15–90 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15033-1 Related CVEs: CVE-2017-9232 CVE-2020-36846 CVE-2022-45157 CVE-2023-0109 CVE-2023-42818 CVE-2024-22036 CVE-2024-28892 CVE-2024-39223  +12 more Upstream summary: Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting […]

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1842 (see also SUSE bugzilla) Related CVEs: CVE-2025-55130 CVE-2025-55131 CVE-2025-59465 CVE-2025-23083 CVE-2025-23166 CVE-2025-59466 CVE-2026-21637 CVE-2026-22036  +11 more Upstream summary: A flaw in Node.js's Permissions model allows attackers to bypass `–allow-fs-read` and `–allow-fs-write` […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2276-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24795 CVE-2023-33460 Upstream summary: yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of […]