🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:3135-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2708 Upstream summary: Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2008:004 (see also SUSE bugzilla) Related CVEs: CVE-2008-0386 CVE-2017-18266 Upstream summary: Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1666-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4539 Upstream summary: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:0026-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19725 CVE-2007-3852 CVE-2019-16167 CVE-2022-39377 CVE-2023-33204 CVE-2018-19416 CVE-2018-19517 Upstream summary: sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10135 (see also SUSE bugzilla) Related CVEs: CVE-2026-34986 Upstream summary: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1936-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-7111 Upstream summary: Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion […]
🔴 Critical ⏱ 15–90 min Last verified: 30 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2023:3956-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15180 CVE-2026-32710 CVE-2025-13699 CVE-2016-3521 CVE-2016-6662 CVE-2016-6664 CVE-2019-18901 CVE-2019-2503 +12 more Upstream summary: A flaw was found in the mysql-wsrep component of mariadb. Lack of input […]
🟡 Medium ⏱ 10–30 min Last verified: 29 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1368-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5209 CVE-2017-5834 CVE-2017-6435 CVE-2017-6437 CVE-2017-6438 CVE-2017-6439 CVE-2017-6440 CVE-2017-7982 +4 more Upstream summary: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to […]
🟠 High ⏱ 15–60 min Last verified: 29 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-32597 Upstream summary: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined […]
🔴 Critical ⏱ 15–90 min Last verified: 29 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3622 CVE-2025-1220 CVE-2025-1217 CVE-2025-1736 CVE-2023-3823 CVE-2023-3824 CVE-2023-0568 CVE-2023-0662 +12 more Upstream summary: Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x […]
