🟠 High ⏱ 15–60 min Last verified: 5 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0158-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0491-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26937 CVE-2017-5618 CVE-2023-24626 CVE-2025-46802 Upstream summary: encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15100-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36087 Upstream summary: OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:010 (see also SUSE bugzilla) Related CVEs: CVE-2009-4273 CVE-2010-0412 CVE-2009-2911 CVE-2010-0411 Upstream summary: stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:3344 (see also SUSE bugzilla) Related CVEs: CVE-2025-30204 CVE-2018-20699 Upstream summary: golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the […]
🟡 Medium ⏱ 10–30 min Last verified: 3 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2168-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38394 CVE-2014-7300 Upstream summary: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic […]
🟡 Medium ⏱ 10–30 min Last verified: 3 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03087-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of […]
🟡 Medium ⏱ 10–30 min Last verified: 3 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:0338-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0118-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33663 CVE-2024-33664 Upstream summary: python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217. Table of […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:658-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19977 Upstream summary: libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. Table […]
