SUSE SLES15: kubernetes1.33-client / kubernetes1.33-client-bash-completion / etc (SUSE-SU-2026:0399-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0399-1 advisory. This update for kubernetes-old rebuilds it against the current GO security release. Tenable has extracted the preceding...

openSUSE 15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-devel-32bit / etc (SUSE-SU-2026:0391-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0391-1 advisory. - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving directives...

CVE-2025-13348

creationtimestamp| type| source ---|---|--- 2026-02-05 03:12:15+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3me3g6xoai22c 2026-03-02 17:20:04+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116160725277267955...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rekor (SUSE-SU-2026:0383-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0383-1 advisory. Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory bsc1248910 -...

openSUSE 15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2026:0377-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0377-1 advisory. - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Tenable has...

AZL-76745 CVE-2026-1642 affecting package nginx for versions less than 1.22.1-15

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MITM position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data in...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-urllib3 (SUSE-SU-2026:0367-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0367-1 advisory. - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in...

PT-2026-21628

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow can occur when processing an attribute in the msl.c...

openSUSE 15 Security Update : logback (SUSE-SU-2026:0361-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0361-1 advisory. - CVE-2026-1225: ACE vulnerability in configuration file bsc1257094 Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2026-23794

creationtimestamp| type| source ---|---|--- 2026-02-02 13:00:57+00:00| seen| https://seclists.org/oss-sec/2026/q1/138 2026-02-02 15:00:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdv4f2jj622s...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0034-1 Rating: important References: 1257404 Cross-References: CVE-2026-1504 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: Chromium was...

openSUSE 15 Security Update : assertj-core (SUSE-SU-2026:0344-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0344-1 advisory. Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion bsc1257293. Tenable has extracted the preceding description bloc...

PT-2026-21605

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A logic error in YUV sampling factor validation allows an invalid sampling...

SUSE: Security Advisory (SUSE-SU-2026:0319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:0326-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0326-1 advisory. This update for helm rebuilds it against the current GO security release. Tenable has extracted the preceding description bloc...

SUSE: Security Advisory (SUSE-SU-2026:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PolarLearn input validation vulnerability

PolarLearn is an online learning platform developed by PolarNL as open source. Versions of PolarLearn prior to 0-PRERELEASE-15 contained a vulnerability related to input validation. This vulnerability stemmed from the lack of runtime validation, which could allow for bypassing intended business...

openSUSE 15 Security Update : python-python-multipart (SUSE-SU-2026:0307-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0307-1 advisory. - CVE-2026-24486: Fixed non-default configuration options can lead to path traversal bsc1257301. Tenable has extracted the preceding description block direct...

openSUSE Security Advisory (SUSE-SU-2026:0287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-1284

creationtimestamp| type| source ---|---|--- 2026-01-26 15:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mddj4ce5yz23 2026-01-26 17:24:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddr5towvi2m 2026-02-13 05:00:00+00:00| seen|...