🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:2025-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-46828 Upstream summary: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21159-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11687 Upstream summary: A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page – enabling DOM […]
🔴 Critical ⏱ 15–90 min Last verified: 3 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9063 CVE-2026-32776 CVE-2026-32777 CVE-2025-59375 CVE-2024-8176 CVE-2024-28757 CVE-2022-43680 CVE-2022-40674 +12 more Upstream summary: An integer overflow during the parsing of XML using the Expat library. This […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:18028 (see also SUSE bugzilla) Related CVEs: CVE-2026-33416 CVE-2026-33636 CVE-2026-25646 CVE-2025-66293 CVE-2011-2690 CVE-2011-2692 CVE-2026-34757 CVE-2026-22801 +12 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]
🔴 Critical ⏱ 15–90 min Last verified: 3 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2272-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28397 Upstream summary: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30861 CVE-2025-47278 Upstream summary: Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03457-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-9375 Upstream summary: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4092-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-1372 CVE-2019-7148 CVE-2014-0172 CVE-2014-9447 CVE-2017-7607 CVE-2017-7608 CVE-2017-7609 CVE-2017-7610 +12 more Upstream summary: A vulnerability was found in GNU elfutils 0.192. It has been declared as […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3380-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9494 CVE-2019-9498 CVE-2019-9499 CVE-2021-0326 CVE-2021-27803 CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 +12 more Upstream summary: The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel […]
