🔴 Critical ⏱ 15–90 min Last verified: 26 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0010-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7512 CVE-2015-8104 CVE-2025-27465 CVE-2024-31145 CVE-2024-31143 CVE-2023-34326 CVE-2023-34322 CVE-2022-42332 +12 more Upstream summary: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:1417-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🔴 Critical ⏱ 15–90 min Last verified: 26 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20090-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66570 CVE-2026-21428 CVE-2026-28435 CVE-2025-53628 CVE-2025-53629 CVE-2025-46728 CVE-2026-22776 CVE-2026-28434 +2 more Upstream summary: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3719-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47874 Upstream summary: Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0250-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50711 Upstream summary: vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:0270-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9114 CVE-2016-2779 CVE-2017-2616 CVE-2024-28085 CVE-2025-14104 CVE-2026-3184 CVE-2021-3995 CVE-2021-3996 +4 more Upstream summary: Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:0921-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-0797 CVE-2016-9447 CVE-2016-9808 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808 CVE-2022-1920 CVE-2022-1921 +10 more Upstream summary: GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x […]
🟡 Medium ⏱ 10–30 min Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0913-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-14151 CVE-2017-14152 CVE-2020-27823 CVE-2020-6851 CVE-2020-8112 CVE-2021-3575 CVE-2016-10504 CVE-2016-10505 +12 more Upstream summary: An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1751-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2332 CVE-2026-5795 CVE-2025-5115 CVE-2024-13009 CVE-2024-22201 CVE-2023-36478 CVE-2022-2048 CVE-2021-28165 +12 more Upstream summary: In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk […]
