🟠 High ⏱ 15–60 min Last verified: 27 July 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2026:20990-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31979 CVE-2025-54882 CVE-2025-5791 CVE-2026-34397 CVE-2025-53013 CVE-2024-11738 CVE-2025-58160 Upstream summary: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and […]
🔴 Critical ⏱ 15–90 min Last verified: 27 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:1472 (see also SUSE bugzilla) Related CVEs: CVE-2025-15467 CVE-2006-3738 CVE-2026-28388 CVE-2026-31789 CVE-2025-11187 CVE-2025-15468 CVE-2006-2937 CVE-2007-4995 +12 more Upstream summary: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters […]
🟡 Medium ⏱ 10–30 min Last verified: 26 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2007:027 (see also SUSE bugzilla) Related CVEs: CVE-2007-1351 CVE-2009-0946 CVE-2010-2497 CVE-2010-2805 CVE-2010-3053 CVE-2010-3054 CVE-2010-3311 CVE-2010-3814 +12 more Upstream summary: Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before […]
🟡 Medium ⏱ 10–30 min Last verified: 25 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3021-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4039 Upstream summary: **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in […]
🟢 Low ⏱ 5–15 min Last verified: 24 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2025:9332 (see also SUSE bugzilla) Related CVEs: CVE-2014-9474 Upstream summary: Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to […]
🟠 High ⏱ 15–60 min Last verified: 24 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:1744-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-8088 Upstream summary: org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData […]
🟠 High ⏱ 15–60 min Last verified: 24 July 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1637-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-35329 CVE-2026-35330 CVE-2026-35332 CVE-2026-35333 CVE-2026-35334 CVE-2026-25075 CVE-2025-62291 CVE-2018-10811 +12 more Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 23 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:2172-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9180 Upstream summary: perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless […]
🟠 High ⏱ 15–60 min Last verified: 23 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:0355-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3695 CVE-2019-3696 CVE-2024-3019 CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421 CVE-2012-5530 +3 more Upstream summary: A Improper Control of Generation of Code vulnerability in the packaging of pcp […]
🟠 High ⏱ 15–60 min Last verified: 23 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0979-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2176 CVE-2025-2177 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 Upstream summary: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption […]
