Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•17 views

SUSE CVE-2026-33529

Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. Prior to version 3.3.2, an authenticated path traversal vulnerability in the configuration import endpoint allows an authenticated user to write arbitrary files outside the config directory, which can lead to RCE by creating a...

8.8CVSS6AI score0.00434EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•17 views

SUSE CVE-2026-33542

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker...

6.4CVSS5.8AI score0.0018EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•17 views

SUSE CVE-2026-23311

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctxschedin Lockdep found a bug in the event scheduling when a pinned event was failed and wakes up the threads in the ring buffer like below. It seems it should not grab a wait-queue lock...

5.5CVSS5.8AI score0.00093EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 11:53 a.m.•17 views

SUSE CVE-2026-4712

Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.5CVSS7.2AI score0.00385EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•17 views

SUSE CVE-2026-4720

Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in...

8.8CVSS7.4AI score0.00424EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•17 views

SUSE CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

5CVSS7.2AI score0.00322EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•17 views

SUSE CVE-2026-4727

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

4.3CVSS7.2AI score0.0053EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:24 a.m.•17 views

SUSE CVE-2026-32246

Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC authorization endpoint allows users with a TOTP-pending session password verified, TOTP not yet completed to obtain authorization codes. An attacker who knows a user's password but not their TOTP secret can obtain...

8.5CVSS5.9AI score0.0027EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/14 12:24 a.m.•17 views

SUSE CVE-2026-32239

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in...

6.5CVSS5.8AI score0.00207EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/04 12:29 a.m.•17 views

SUSE CVE-2026-22892

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have acce...

4.3CVSS5.8AI score0.00239EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/04 12:26 a.m.•17 views

SUSE CVE-2026-25802

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe operation occurs in component MarkdownRenderer.jsx, allowing for Cross-Site ScriptingXSS when the model outputs items containing tag. Version...

7.6CVSS5.8AI score0.00222EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/04 12:26 a.m.•17 views

SUSE CVE-2026-26995

Further research determined the issue is an external dependency vulnerability...

5.8AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/02/25 12:24 a.m.•17 views

SUSE CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

7.4CVSS6AI score0.00272EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/02/07 12:24 a.m.•17 views

SUSE CVE-2026-24514

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

6.5CVSS5.4AI score0.0046EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/02/06 12:34 a.m.•17 views

SUSE CVE-2025-61732

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

9.6CVSS5.3AI score0.00472EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2026/02/01 12:24 a.m.•17 views

SUSE CVE-2026-23015

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix reference leak in gpiompsseprobe error paths The reference obtained by calling usbgetdev is not released in the gpiompsseprobe error paths. Fix that by using device managed helper functions. Also remove the...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/30 1:37 a.m.•17 views

SUSE CVE-2020-37011

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/26 12:24 a.m.•17 views

SUSE CVE-2026-22998

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec Commit efa56305908b "nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" added ttag bounds checking and dataoffset validation in...

5.5CVSS5.3AI score0.0071EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2026/01/26 12:24 a.m.•17 views

SUSE CVE-2026-23013

In the Linux kernel, the following vulnerability has been resolved: net: octeonepvf: fix freeirq devid mismatch in IRQ rollback octepvfrequestirqs requests MSI-X queue IRQs with devid set to ioqvector. If requestirq fails part-way, the rollback loop calls freeirq with devid set to 'oct', which do...

7.8CVSS5.2AI score0.00152EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/23 12:40 a.m.•17 views

SUSE CVE-2025-38596

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...

7.8CVSS6.3AI score0.00153EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/19 12:23 a.m.•17 views

SUSE CVE-2025-71115

In the Linux kernel, the following vulnerability has been resolved: um: init cputasks earlier This is currently done in umlfinishsetup, but e.g. with KCOV enabled we'll crash because some init code can call into e.g. memparse, which has coverage annotations, and then the checks in checkkcovmode...

5.5CVSS6.7AI score0.00112EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/17 12:51 a.m.•17 views

SUSE CVE-2017-18891

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link...

6.1CVSS7AI score0.00685EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:37 a.m.•17 views

SUSE CVE-2017-18874

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal...

6.5CVSS6.3AI score0.01233EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:25 a.m.•17 views

SUSE CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS7.1AI score0.00446EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
•added 2025/12/31 12:32 a.m.•17 views

SUSE CVE-2022-50818

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

5.5CVSS6.8AI score0.00211EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•17 views

SUSE CVE-2022-50849

In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vmaping with VMIOREMAP An oops can be induced by running 'cat /proc/kcore /dev/null' on devices using pstore with the ram backend because kmapatomic assumes lowmem pages are accessible with va. Unable ...

5.5CVSS6.4AI score0.00203EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/12/31 12:30 a.m.•17 views

SUSE CVE-2022-50867

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs statekcalloc usage adrenoshowobject is a trap! It will re-allocate the pointer it is passed on first call, when the data is ascii85 encoded, using kvmalloc/ kvfree. Which means the data passed to it...

5.5CVSS6.4AI score0.00126EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/12/31 12:30 a.m.•17 views

SUSE CVE-2022-50876

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix musbgadget.c rxstate overflow bug The usb function device call musbgadgetqueue adds the passed request to musbep::reqlist,If the request-length musbep-packetsz and isbuffermappedreq return false,the rxstate will co...

5.5CVSS6.8AI score0.00203EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/12/31 12:29 a.m.•17 views

SUSE CVE-2023-54166

In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndotxtimeout callback The Xeon validation group has been carrying out some loaded tests with various HW configurations, and they have seen some transmit queue time out happening during the test. This...

4.7CVSS6.4AI score0.00134EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/12/31 12:28 a.m.•17 views

SUSE CVE-2023-54214

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling allocskb which may release the chan lock and reacquire later which makes it possible that the chan is...

5.8CVSS6.6AI score0.00275EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/12/30 12:30 a.m.•17 views

SUSE CVE-2018-25154

GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system...

9.8CVSS8.2AI score0.00345EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•17 views

SUSE CVE-2022-50706

In the Linux kernel, the following vulnerability has been resolved: net/ieee802154: don't warn zero-sized rawsendmsg syzbot is hitting skbassertlen warning at devqueuexmit 1, for PFIEEE802154 socket's zero-sized rawsendmsg request is hitting devqueuexmit with skb-len == 0. Since PFIEEE802154...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/25 1:4 a.m.•17 views

SUSE CVE-2022-50737

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate index root when initialize NTFS security This enhances the sanity check for $SDH and $SII while initializing NTFS security, guarantees these index root are legit. 162.459513 BUG: KASAN: use-after-free in...

6.4AI score0.00177EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/25 12:57 a.m.•17 views

SUSE CVE-2023-54003

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when createah fails If AH create request fails, release sgidattr to avoid GID entry referrence leak reported while releasing GID table...

3.3CVSS6.5AI score0.00184EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/17 2:19 a.m.•17 views

SUSE CVE-2017-18876

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file...

4.9CVSS6.8AI score0.00862EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/12/17 12:25 a.m.•17 views

SUSE CVE-2025-68218

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases nvme/014, 057 and 058 fail occasionally due to a lockdep WARN. As reported in the Closes tag URL, the WARN indicates that a deadlock can happen due t...

5.5CVSS6.5AI score0.00516EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•17 views

SUSE CVE-2022-50657

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: add missing memcpy in kasaninit Hi Atish, It seems that the panic is due to the missing memcpy during kasaninit. Could you please check whether this patch is helpful? When doing kasanpopulate, the new allocated...

6.5AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•17 views

SUSE CVE-2022-50666

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix QP destroy to wait for all references dropped. Delay QP destroy completion until all siw references to QP are dropped. The calling RDMA core will free QP structure after successful return from siwqpdestroy call, so...

5.5CVSS6.5AI score0.00722EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/08 12:23 a.m.•17 views

SUSE CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

5.5CVSS6.3AI score0.0014EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/11/14 12:24 a.m.•17 views

SUSE CVE-2025-40164

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...

4.7CVSS6.7AI score0.00181EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/10/01 11:23 p.m.•17 views

SUSE CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

5.5CVSS6.5AI score0.00152EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/09/19 11:23 p.m.•17 views

SUSE CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS6.3AI score0.00135EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/09/17 11:29 p.m.•17 views

SUSE CVE-2023-53189

In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify rstimer timeout. There is a time gap in 1, during which if the pending...

5.5CVSS6.5AI score0.00153EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2025/09/04 11:23 p.m.•17 views

SUSE CVE-2025-38706

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime sndsocremovepcmruntime might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as...

4.7CVSS6.4AI score0.0019EPSS
SaveExploits0References26
SUSE CVE
SUSE CVE
•added 2025/09/04 11:23 p.m.•17 views

SUSE CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

5.5CVSS6.2AI score0.00314EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/07/28 11:23 p.m.•17 views

SUSE CVE-2025-38467

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7drmdecon: add vblank check in IRQ handling If there's support for another console device such as a TTY serial, the kernel occasionally panics during boot. The panic message and a relevant snippet of the call...

4.7CVSS6.3AI score0.00166EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/07/25 11:22 p.m.•17 views

SUSE CVE-2025-38456

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmicreateuser The "intf" list iterator is an invalid pointer if the correct "intf-intfnum" is not found. Calling atomicdec&intf-nrusers on and invalid pointer will lead to memo...

6.1CVSS6.7AI score0.00159EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/07/09 11:23 p.m.•17 views

SUSE CVE-2025-38239

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is detected: megaraidsas 0000:3f:00.0: requested/available msix 128/128 pollqueue 0 ------------ cut here ------------ UBSAN:...

6.1CVSS7.9AI score0.00148EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/07/03 11:24 p.m.•17 views

SUSE CVE-2025-38099

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READVOICESETTING is unsupported/broken A SCO connection without the proper voicesetting can cause the controller to lock up...

3.3CVSS6.5AI score0.00159EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/06/19 3:45 a.m.•17 views

SUSE CVE-2022-49977

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead ftracestartup does not remove ops from ftraceopslist when ftracestartupenable fails: registerftracefunction ftracestartup registerftracefunction...

4.4CVSS6AI score0.0022EPSS
SaveExploits0References13
Total number of security vulnerabilities5000