🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03354-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48945 Upstream summary: pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:4393-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-11407 CVE-2024-7246 Upstream summary: There exists a denial of service through Data corruption in gRPC-C++ – gRPC-C++ servers with transmit zero copy enabled through the […]
🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8834 (see also SUSE bugzilla) Related CVEs: CVE-2023-41419 Upstream summary: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. […]
🟡 Medium ⏱ 10–30 min Last verified: 19 December 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate […]
🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:8837 (see also SUSE bugzilla) Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2022-48279 CVE-2025-54571 Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up […]
🔴 Critical ⏱ 15–90 min Last verified: 19 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can […]
🟡 Medium ⏱ 10–30 min Last verified: 18 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2007-0235 Upstream summary: Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) […]
🟡 Medium ⏱ 10–30 min Last verified: 18 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29425 CVE-2024-47554 Upstream summary: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the […]
🔴 Critical ⏱ 15–90 min Last verified: 18 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-10672 CVE-2019-16092 CVE-2019-16093 CVE-2021-3756 CVE-2019-16091 CVE-2019-16094 CVE-2019-16095 CVE-2019-20063 +7 more Upstream summary: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and […]
🟡 Medium ⏱ 10–30 min Last verified: 17 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1100-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8908 CVE-2023-2976 Upstream summary: A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially […]
