🟠 High ⏱ 15–60 min Last verified: 2 February 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-27135 CVE-2024-28182 CVE-2023-35945 CVE-2018-1000168 CVE-2016-1544 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0643-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21892 CVE-2025-22150 CVE-2025-23085 CVE-2024-21538 CVE-2024-22020 CVE-2024-36138 CVE-2024-27980 Upstream summary: On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0344-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2006:027 (see also SUSE bugzilla) Related CVEs: CVE-2006-2607 CVE-2010-0424 CVE-2019-9704 CVE-2019-9705 Upstream summary: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2025:19610 (see also SUSE bugzilla) Related CVEs: CVE-2025-11561 CVE-2010-4341 CVE-2011-1758 CVE-2013-0219 CVE-2013-0220 CVE-2013-0287 CVE-2018-10852 CVE-2018-16838 +4 more Upstream summary: A flaw was found in the integration of Active Directory and the System […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3889-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29457 CVE-2021-31292 CVE-2025-55304 CVE-2018-11531 CVE-2018-20097 CVE-2018-20098 CVE-2019-13109 CVE-2021-29473 +12 more Upstream summary: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0233-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22702 Upstream summary: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1872-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4948 CVE-2016-5410 Upstream summary: A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:1791-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12779 CVE-2023-39976 Upstream summary: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm […]
