🟡 Medium ⏱ 10–30 min Last verified: 7 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1042-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2808 Upstream summary: HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. […]
🟠 High ⏱ 15–60 min Last verified: 7 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0788-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1760 CVE-2025-32049 CVE-2026-2708 CVE-2026-1761 CVE-2026-1536 CVE-2025-14523 CVE-2026-0719 CVE-2025-12105 +12 more Upstream summary: A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because […]
🟠 High ⏱ 15–60 min Last verified: 7 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1124-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-32853 CVE-2026-32854 CVE-2020-14403 CVE-2020-14404 Upstream summary: LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding […]
🔴 Critical ⏱ 15–90 min Last verified: 7 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1000005 CVE-2018-1000301 CVE-2026-1965 CVE-2025-9086 CVE-2013-1944 CVE-2018-0500 CVE-2019-15601 CVE-2020-8177 +12 more Upstream summary: libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code […]
🟠 High ⏱ 15–60 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-45139 CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10585 (see also SUSE bugzilla) Related CVEs: CVE-2025-48060 CVE-2024-23337 CVE-2015-8863 CVE-2016-4074 CVE-2025-9403 Upstream summary: jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:2109-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20170-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-64718 Upstream summary: js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-2142 Upstream summary: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-18198 CVE-2017-18201 CVE-2017-18199 Upstream summary: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) […]
