🟠 High ⏱ 15–60 min Last verified: 24 December 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:21200-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59777 CVE-2025-62689 CVE-2023-27371 CVE-2013-7038 CVE-2013-7039 Upstream summary: NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:4054-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28168 Upstream summary: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15094-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22895 Upstream summary: The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0403-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 Upstream summary: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:20892-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11731 CVE-2024-55549 CVE-2025-24855 CVE-2021-30560 CVE-2019-18197 CVE-2016-4738 CVE-2017-5029 CVE-2019-11068 +4 more Upstream summary: A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7679 (see also SUSE bugzilla) Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:518-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25219 CVE-2020-26154 CVE-2012-4504 Upstream summary: url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-16866 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 CVE-2022-3204 CVE-2025-5994 CVE-2025-11411 CVE-2014-8602 +8 more Upstream summary: Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:1128-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000156 Upstream summary: GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in […]
