🟡 Medium ⏱ 10–30 min Last verified: 2 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:21016-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59432 CVE-2022-26520 Upstream summary: SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication […]
🔴 Critical ⏱ 15–90 min Last verified: 2 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:1836-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12815 CVE-2019-19270 CVE-2020-9272 CVE-2020-9273 CVE-2023-51713 CVE-2024-48651 CVE-2015-3306 CVE-2016-3125 +4 more Upstream summary: An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01805-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-31178 CVE-2025-31181 CVE-2025-3359 CVE-2025-31179 CVE-2020-25969 CVE-2017-9670 CVE-2018-19490 CVE-2018-19491 +1 more Upstream summary: A flaw was found in gnuplot. The GetAnnotateString() function may lead to a […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10407 (see also SUSE bugzilla) Related CVEs: CVE-2025-47273 CVE-2024-6345 CVE-2022-40897 CVE-2013-7440 Upstream summary: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal […]
🟡 Medium ⏱ 10–30 min Last verified: 27 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02734-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6297 CVE-2022-1664 CVE-2015-0840 Upstream summary: It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, […]
🔴 Critical ⏱ 15–90 min Last verified: 27 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02056-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4852 CVE-2025-48734 CVE-2014-3540 CVE-2019-10086 CVE-2014-0114 Upstream summary: The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3029-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29450 CVE-2021-27927 CVE-2024-42333 CVE-2024-22119 CVE-2022-43515 CVE-2022-35230 CVE-2022-24349 CVE-2013-7484 +7 more Upstream summary: JavaScript pre-processing can be used by the attacker to gain access to the […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2475-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-52168 CVE-2023-52169 CVE-2017-17969 CVE-2022-47069 CVE-2023-1576 CVE-2025-53817 CVE-2021-3465 CVE-2016-2334 +3 more Upstream summary: The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2024:10952 (see also SUSE bugzilla) Related CVEs: CVE-2023-3823 CVE-2023-3824 CVE-2023-0568 CVE-2023-0662 CVE-2022-37454 CVE-2021-21708 CVE-2024-8927 CVE-2024-9026 +10 more Upstream summary: In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:15608 (see also SUSE bugzilla) Related CVEs: CVE-2024-26130 CVE-2023-38325 Upstream summary: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to […]
