Lucene search
+L

56340 matches found

OSV
OSV
•added 2026/09/11 6:51 a.m.•18 views

SUSE-SU-2026:4128-1 Security update for php7

This update for php7 fixes the following issue: - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. Other changes: - Allow removal of apache2-modphp7 even if the php7 module is not enabled bsc1205782, bsc1276531...

8.1CVSS6AI score0.00148EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•18 views

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

9.1CVSS6.5AI score0.02242EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/09/10 4:27 p.m.•8 views

SUSE CVE-2026-83530

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

6.9CVSS5.9AI score0.00149EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/10 9:31 a.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. CVE-2025-7107...

9.8CVSS5.6AI score0.00675EPSS
SaveExploits0References2722
OSV
OSV
•added 2026/09/10 9:31 a.m.•23 views

SUSE-SU-2026:4120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

9.8CVSS5.8AI score0.01276EPSS
SaveExploits12References1360
SUSE Linux
SUSE Linux
•added 2026/09/09 4:21 p.m.•20 views

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers...

8.7CVSS5.7AI score0.00416EPSS
SaveExploits0References44
SUSE Linux
SUSE Linux
•added 2026/09/09 4:19 p.m.•15 views

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

6.9CVSS6.6AI score0.00524EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2026/09/09 4:17 p.m.•22 views

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

5.9AI score
SaveExploits0References18
OSV
OSV
•added 2026/09/09 4:17 p.m.•30 views

SUSE-SU-2026:4112-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...

5.9AI score
SaveExploits0References10
OSV
OSV
•added 2026/09/09 4:16 p.m.•11 views

SUSE-SU-2026:4111-1 Security update for python-Authlib

This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with unsupported responsetypes can cause unauthenticated open redirects bsc1275231...

5.4CVSS6.1AI score0.00257EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
•added 2026/09/09 1:23 p.m.•13 views

Security update for python-pip

This update for python-pip fixes the following issue: Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

3.1CVSS6.2AI score0.00443EPSS
SaveExploits1References4
OSV
OSV
•added 2026/09/09 1:22 p.m.•7 views

SUSE-SU-2026:4104-1 Security update for python-pip

This update for python-pip fixes the following issue: - Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599...

2CVSS6.2AI score0.00443EPSS
SaveExploits1References3
NVD
NVD
•added 2026/09/09 9:17 a.m.•15 views

CVE-2025-46808

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

6.8CVSS0.00201EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 8:25 a.m.•36 views

CVE-2025-46808

SUSE NeuVector manager (versions before 5.4.5 ) is affected by an Insertion of Sensitive Information into Log File vulnerability, where sensitive data is exposed in the manager container's log. The CVSS v3.1 base score is 6.8 (Medium) with a High confidentiality impact but no integrity or availab...

6.8CVSS5.8AI score0.00201EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 8:25 a.m.•15 views

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

6.8CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/09 8:25 a.m.•14 views

EUVD-2025-210877

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

6.8CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/09 8:25 a.m.•11 views

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

6.8CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/09 8:25 a.m.•50 views

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

6.8CVSS0.00201EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/09 12:26 a.m.•16 views

SUSE CVE-2026-19614

The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3...

5.3CVSS5.9AI score0.00232EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/09 12:23 a.m.•15 views

SUSE CVE-2026-26247

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...

9.1CVSS5.8AI score0.00495EPSS
SaveExploits0References2
Rows per page
Query Builder