Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
added 2026/05/13 3:34 a.m.18 views

SUSE CVE-2026-43355

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the error check to ensure the PM runtime reference count is always decremented after pmruntimegetsync, regardless of whether the read...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/13 3:34 a.m.18 views

SUSE CVE-2026-43374

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in removenhgrpentry When removing a nexthop from a group, removenhgrpentry publishes the new group via rcuassignpointer then immediately frees the removed entry's percpu stats with...

4.7CVSS5.8AI score0.00125EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/05/13 3:34 a.m.18 views

SUSE CVE-2026-43381

In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and userspace wants to use /dev/drmdp then just tell it the device is busy instead of crashing in the GSP code. WARNING: CPU: 2 PID:...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/13 3:33 a.m.18 views

SUSE CVE-2026-43468

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix deadlock between devlink lock and esw-wq esw-workqueue executes eswfunctionschangedeventhandler - eswvfschangedeventhandler and acquires the devlink lock. .eswitchmodeset acquires devlink lock in devlinknlpredoit -...

5.5CVSS5.8AI score0.00091EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/05/12 3:34 a.m.18 views

SUSE CVE-2025-71300

In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe. OP-TEE logic in U-Boot automatically injects a reserved-memory node along with optee firmware node to...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/05/12 3:31 a.m.18 views

SUSE CVE-2026-43190

In the Linux kernel, the following vulnerability has been resolved: netfilter: xttcpmss: check remaining length before reading optlen Quoting reporter: In net/netfilter/xttcpmss.c lines 53-68, the TCP option parser reads opi+1 directly without validating the remaining option length. If the last...

8.2CVSS6AI score0.00463EPSS
SaveExploits0References153
SUSE CVE
SUSE CVE
added 2026/05/11 2:17 p.m.18 views

SUSE CVE-2026-6722

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys,...

8.1CVSS6.1AI score0.00894EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/05/11 2:17 p.m.18 views

SUSE CVE-2026-7568

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the metaphone function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed...

7CVSS5.9AI score0.00455EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/05/11 2:17 p.m.18 views

SUSE CVE-2026-8177

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory...

8.2CVSS5.8AI score0.00629EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/05/11 2:14 p.m.18 views

SUSE CVE-2026-43333

In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTRTOBUF pointers checkmemaccess matches PTRTOBUF via basetype which strips PTRMAYBENULL, allowing direct dereference without a null check. Map iterator ctx-key and ctx-value are PTRTOBUF |...

5.6CVSS5.8AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/05/11 2:14 p.m.18 views

SUSE CVE-2026-43359

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the BTRFSUUIDKEYRECEIVEDSUBVOL we have to abort the transaction since we did...

6.6CVSS5.8AI score0.00123EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/05/11 2:13 p.m.18 views

SUSE CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhcidisableslot xhcialloccommand allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhcidisableslot only...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/11 2:13 p.m.18 views

SUSE CVE-2026-45130

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in readcompound in src/spellfile.c when loading a crafted spell file .spl with UTF-8 encoding active. An attacker-controlled length field in the spell file's compound section overflows a 32-b...

6.6CVSS5.9AI score0.00248EPSS
SaveExploits1References13
SUSE CVE
SUSE CVE
added 2026/05/09 2:46 a.m.18 views

SUSE CVE-2026-8086

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/05/09 2:42 a.m.18 views

SUSE CVE-2026-42499

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/05/09 2:41 a.m.18 views

SUSE CVE-2026-43197

In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole from the console subsystem is not guaranteed to be nul-terminated. Before recent commit 7eab73b18630 "netconsole: convert to NBCON console...

5.5CVSS5.7AI score0.00478EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/05/09 2:39 a.m.18 views

SUSE CVE-2026-43441

In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix ndtbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the ndtbl is never initialized because inet6init exits before ndiscinit is called which initializes it. If bonding...

5.9CVSS5.8AI score0.00479EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/05/09 2:39 a.m.18 views

SUSE CVE-2026-43500

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...

8.8CVSS6AI score0.92855EPSS
SaveExploits21References33
SUSE CVE
SUSE CVE
added 2026/05/08 2:43 a.m.18 views

SUSE CVE-2013-0804

The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service incorrect pointer dereference via unspecified vectors...

10CVSS6.2AI score0.12398EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2026/05/08 2:42 a.m.18 views

SUSE CVE-2014-0610

The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service invalid pointer dereference via unspecified vectors...

10CVSS6.2AI score0.05534EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/05/08 2:26 a.m.18 views

SUSE CVE-2026-7951

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00383EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/08 2:25 a.m.18 views

SUSE CVE-2026-8013

Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/08 2:22 a.m.18 views

SUSE CVE-2026-33414

Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $...

7.8CVSS6.1AI score0.00607EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/08 2:20 a.m.18 views

SUSE CVE-2026-43150

In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware configurations So far we've been fairly lax about accepting both unknown CMN models at least with a warning, and unknown revisions of those which we do know, as although things do...

5.5CVSS5.7AI score0.00139EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2026/05/07 2:24 a.m.18 views

SUSE CVE-2025-71293

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: Move ras data alloc before bad page check In the rare event if eeprom has only invalid address entries, allocation is skipped, this causes following NULL pointer issue 547.103445 BUG: kernel NULL pointer...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/07 2:23 a.m.18 views

SUSE CVE-2026-7572

An off-by-one error CWE-193 in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service DoS via a process crash by providing a specially crafted .evtx file to the parseevtx VQL...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/07 2:19 a.m.18 views

SUSE CVE-2026-43053

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended attributes, xfsattr3nodeinactive invalidates all child leaf/node blocks via xfstransbinval, but intentionally does not remo...

5.5CVSS5.7AI score0.00074EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.18 views

SUSE CVE-2026-43088

In the Linux kernel, the following vulnerability has been resolved: net: afkey: zero aligned sockaddr tail in PFKEY exports PFKEY export paths use pfkeysockaddrsize when reserving sockaddr payload space, so IPv6 addresses occupy 32 bytes on the wire. However, pfkeysockaddrfill initializes only th...

3.3CVSS5.9AI score0.00122EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.18 views

SUSE CVE-2026-43112

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath When cifssanitizeprepath is called with an empty string or a string containing only delimiters e.g., "/", the current logic attempts to check cursor2 - 1 before cursor2...

5.5CVSS5.8AI score0.00352EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.18 views

SUSE CVE-2026-43114

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapoavx2: don't return non-matching entry on expiry New test case fails unexpectedly when avx2 matching functions are used. The test first loads a ranomly generated pipapo set with 'ipv4 . port' key, i.e. nft -...

9.4CVSS5.8AI score0.00356EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.18 views

SUSE CVE-2026-43115

In the Linux kernel, the following vulnerability has been resolved: srcu: Use irqwork to start GP in tiny SRCU Tiny SRCU's srcugpstartifneeded directly calls schedulework, which acquires the workqueue pool-lock. This causes a lockdep splat when callsrcu is called with a scheduler lock held, due t...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/07 2:17 a.m.18 views

SUSE CVE-2026-43152

In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init must be reported back or we'll follow a NULL pointer the first time FF is used...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/07 2:17 a.m.18 views

SUSE CVE-2026-43171

In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check if the error record length is big enough to handle offset. On a bad firmware, if the ofset is above the actual record, length -= offs...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/05/06 1:55 a.m.18 views

SUSE CVE-2012-0418

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file...

9.3CVSS6.2AI score0.03753EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/05/06 1:43 a.m.18 views

SUSE CVE-2026-31734

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix isbpfmigrationdisabled false negative on non-PREEMPTRCU Since commit 8e4f0b1ebcf2 "bpf: use rcureadlockdontmigrate for trampoline.c", the BPF prolog bpfprogenter calls migratedisable only when CONFIGPREEMPTRCU is...

5.8AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/06 1:43 a.m.18 views

SUSE CVE-2026-31760

In the Linux kernel, the following vulnerability has been resolved: gpib: lpvousb: fix memory leak on disconnect The driver iterates over the registered USB interfaces during GPIB attach and takes a reference to their USB devices until a match is found. These references are never released which...

5.7AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.18 views

SUSE CVE-2026-31762

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines down if iiotriggerregister fails the function returns without properly releasing the handler. Add cleanup goto to resolve resource leak...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.18 views

SUSE CVE-2026-31775

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver changed the assignment of atc-daios at atcgetresources; now it loops over all enum DAIOTYP entries while it looped formerly only a pa...

5.5CVSS5.8AI score0.00107EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.18 views

SUSE CVE-2026-31780

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation The variable valuesize is declared as u8 but accumulates the total length of all SSIDs to scan. Each SSID contributes up to 33 bytes IEEE80211MAXSSIDLEN + 1, an...

5.5CVSS5.9AI score0.00143EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.18 views

SUSE CVE-2026-31784

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pxp: Clear restart flag in pxpstart after jumping back If we don't clear the flag we'll keep jumping back at the beginning of the function once we reach the end. cherry picked from commit...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/06 1:40 a.m.18 views

SUSE CVE-2026-43071

In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two There is an OOB read problem on dentryhashtable when user sets 'dhashentries=1': BUG: unable to handle page fault for address: ffff888b30b774b0 PF: supervisor read access in kerne...

6.1CVSS5.8AI score0.0039EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/05 1:48 a.m.18 views

SUSE CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

7.3CVSS6.9AI score0.00466EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/05 1:46 a.m.18 views

SUSE CVE-2026-31687

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

4.1CVSS5.8AI score0.00096EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/02 1:25 a.m.18 views

SUSE CVE-2026-31710

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifsmountgettcon with SMB1 UNIX mounts, @cifssb-mntcifsflags needs to be read or updated only after calling resetcifsunixcaps, otherwise it might end up with missing...

8.5CVSS5.7AI score0.001EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.18 views

SUSE CVE-2026-6519

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00171EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.18 views

SUSE CVE-2026-6521

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00143EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2026/05/01 2:3 a.m.18 views

SUSE CVE-2026-42014

A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

4CVSS5.3AI score0.0015EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/04/30 2:42 a.m.18 views

SUSE CVE-2011-3175

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request...

10CVSS6.4AI score0.66053EPSS
SaveExploits6References3
SUSE CVE
SUSE CVE
added 2026/04/30 2:25 a.m.18 views

SUSE CVE-2026-41140

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.datafilter is unavailable. Considering only Python versions which are still supporte...

8.7CVSS5.4AI score0.00294EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/25 1:38 a.m.18 views

SUSE CVE-2026-31580

In the Linux kernel, the following vulnerability has been resolved: bcache: fix cacheddev.sbbio use-after-free and crash In our production environment, we have received multiple crash reports regarding libceph, which have caught our attention: 6888366.280350 Call Trace: 6888366.280452...

6.7CVSS5.6AI score0.00128EPSS
SaveExploits0References9
Total number of security vulnerabilities5000