🟠 High ⏱ 15–60 min Last verified: 18 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]
🟡 Medium ⏱ 10–30 min Last verified: 18 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1238-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1571 CVE-2018-10886 CVE-2020-11979 CVE-2020-1945 CVE-2021-36373 CVE-2021-36374 Upstream summary: Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:13515 (see also SUSE bugzilla) Related CVEs: CVE-2026-33554 Upstream summary: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2007-2452 Upstream summary: Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 17 April 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0167-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23013 CVE-2018-20340 CVE-2019-12209 CVE-2019-12210 CVE-2019-9578 Upstream summary: In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module […]
🟠 High ⏱ 15–60 min Last verified: 17 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0648-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1837 CVE-2025-12474 Upstream summary: A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another […]
🔴 Critical ⏱ 15–90 min Last verified: 17 April 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3911-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-9264 CVE-2023-3128 CVE-2021-41244 CVE-2026-21720 CVE-2026-21721 CVE-2025-6023 CVE-2025-64751 CVE-2024-45339 +12 more Upstream summary: The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1058-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-6414 Upstream summary: Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4390-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66453 Upstream summary: Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0800-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same […]
