Lucene search
+L
SusecveMost viewed

63543 matches found

SUSE CVE
SUSE CVE
•added 2026/03/13 1:59 p.m.•16 views

SUSE CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

4.3CVSS5.8AI score0.00301EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2026/03/11 12:24 a.m.•16 views

SUSE CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/03/06 12:28 a.m.•16 views

SUSE CVE-2025-69534

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown...

7.5CVSS5.8AI score0.00566EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2026/02/27 12:25 a.m.•16 views

SUSE CVE-2026-25941

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory...

4.3CVSS5.9AI score0.00284EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2026/02/25 12:24 a.m.•16 views

SUSE CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6AI score0.00161EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/02/25 12:24 a.m.•16 views

SUSE CVE-2026-25987

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

5.3CVSS5.9AI score0.0037EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/02/20 12:25 a.m.•16 views

SUSE CVE-2026-22860

Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, Rack::Directory's path check used a string prefix match on the expanded path. A request like /../rootexample/ can escape the configured root if the target path starts with the root string, allowing directory...

7.5CVSS6.4AI score0.00665EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/02/19 12:26 a.m.•16 views

SUSE CVE-2026-23219

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Add alloctaggingslabfreehook for memcgallocabortsingle When CONFIGMEMALLOCPROFILINGDEBUG is enabled, the following warning may be noticed: 3959.023862 ------------ cut here ------------ 3959.023891 alloctag was not clear...

5.5CVSS5.6AI score0.00112EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/02/19 12:25 a.m.•16 views

SUSE CVE-2026-25087

Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file but not an IPC stream with pre-buffering enabled, if the IPC file contains data with variadic buffers such as Binary View and String...

7CVSS5.8AI score0.00807EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/02/17 12:26 a.m.•16 views

SUSE CVE-2025-71201

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read result collection for buffered reads seems to run ahead of the completion of subrequests under some circumstances, as can be seen in the following log snippet:...

5.5CVSS5.3AI score0.00117EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/02/05 12:47 a.m.•16 views

SUSE CVE-2025-13473

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The django.contrib.auth.handlers.modwsgi.checkpassword function for authentication via modwsgi allows remote attackers to enumerate users via a timing attack. Earlier, unsupported Django series such as 5.0.x,...

7.5CVSS5.4AI score0.00713EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/02/01 12:23 a.m.•16 views

SUSE CVE-2026-23027

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvmdevice leak in kvmpchpicdestroy In kvmioctlcreatedevice, kvmdevice has allocated memory, kvmdevice-destroy seems to be supposed to free its kvmdevice struct, but kvmpchpicdestroy is not currently doing this...

5.7AI score0.00194EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/30 12:43 a.m.•16 views

SUSE CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00275EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/28 12:25 a.m.•16 views

SUSE CVE-2026-22987

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: avoid dereferencing ERRPTR in tcfidrinfodestroy syzbot reported a crash in tcactinhw during netns teardown where tcfidrinfodestroy passed an ERRPTR-EBUSY value as a tcaction pointer, leading to an invalid...

5.5CVSS5.8AI score0.00103EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/26 12:24 a.m.•16 views

SUSE CVE-2026-23008

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen...

5.5CVSS5.6AI score0.00135EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/26 12:24 a.m.•16 views

SUSE CVE-2026-23011

In the Linux kernel, the following vulnerability has been resolved: ipv4: ipgre: make ipgreheader robust Analog to commit db5b4e39c4e6 "ip6gre: make ip6greheader robust" Over the years, syzbot found many ways to crash the kernel in ipgreheader 1. This involves team or bonding drivers ability to...

5.5CVSS5.2AI score0.00187EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2026/01/25 12:23 a.m.•16 views

SUSE CVE-2026-22993

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command that accesses the rss lut is attempted immediately after reset, it will...

4.4CVSS5.4AI score0.00115EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2026/01/17 12:51 a.m.•16 views

SUSE CVE-2017-18894

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. Sometimes. resource-owner authorization is bypassed, allowing account takeover...

8.1CVSS7AI score0.00821EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/17 12:51 a.m.•16 views

SUSE CVE-2017-18897

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. It mishandles a deny action for a redirection...

6.1CVSS7AI score0.00685EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/17 12:51 a.m.•17 views

SUSE CVE-2017-18905

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled...

5.3CVSS7AI score0.00769EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/17 12:28 a.m.•16 views

SUSE CVE-2025-60538

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack...

6.5CVSS7.1AI score0.00381EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/17 12:27 a.m.•16 views

SUSE CVE-2025-68121

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...

7.4CVSS8.2AI score0.00765EPSS
SaveExploits1References70
SUSE CVE
SUSE CVE
•added 2026/01/06 12:37 a.m.•16 views

SUSE CVE-2017-18885

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf...

9.8CVSS9.2AI score0.01175EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:36 a.m.•16 views

SUSE CVE-2017-18889

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API...

4.3CVSS4.9AI score0.00664EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:28 a.m.•16 views

SUSE CVE-2025-11777

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to access user metadata and channel membership information from other teams via the API endpoint...

4.3CVSS6.7AI score0.00181EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:28 a.m.•16 views

SUSE CVE-2025-13888

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources CRs that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged...

9.1CVSS6.7AI score0.00695EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:25 a.m.•16 views

SUSE CVE-2025-60633

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the NudmSubscriberDataManagement API...

6.5CVSS6.9AI score0.00349EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/12/31 12:32 a.m.•16 views

SUSE CVE-2022-50810

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing putdevice in mportcdevopen When kfifoalloc fails, the refcount of chdev-dev is left incremental. We should use putdevice&chdev-dev to decrease the ref count of chdev-dev to avoid refcount leak...

6.5AI score0.00242EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•16 views

SUSE CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

5.5CVSS6.5AI score0.00223EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•16 views

SUSE CVE-2022-50823

In the Linux kernel, the following vulnerability has been resolved: clk: tegra: Fix refcount leak in tegra114clockinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

5.5CVSS6.4AI score0.00242EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•16 views

SUSE CVE-2022-50826

In the Linux kernel, the following vulnerability has been resolved: ipu3-imgu: Fix NULL pointer dereference in imgusubdevsetselection Calling v4l2subdevgettrycrop and v4l2subdevgettrycompose with a subdev state of NULL leads to a NULL pointer dereference. This can currently happen in...

5.5CVSS6.4AI score0.00214EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•16 views

SUSE CVE-2022-50839

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential buffer head reference count leak As in 'jbd2fcwaitbufs' if buffer isn't uptodate, will return -EIO without update 'journal-jfcoff'. But 'jbd2fcreleasebufs' will release buffer head from 'jfcoff - 1' if 'bh' is...

5.5CVSS6.8AI score0.00214EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/30 12:23 a.m.•16 views

SUSE CVE-2025-68973

In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For ExtendedLTS, 2.2.51 and later are fixed versions...

8CVSS6.8AI score0.00135EPSS
SaveExploits1References18
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•16 views

SUSE CVE-2022-50707

In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtiocryptoalgskcipherclosesession 'vcctrlreq' is alloced in virtiocryptoalgskcipherclosesession, and should be freed in the invalid ctrlstatus-status error handling case. Otherwise there is a...

6.5AI score0.00179EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•16 views

SUSE CVE-2022-50716

In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: Fix use-after-free on ar5523cmd timed out syzkaller reported use-after-free with the stack trace like below 1: 38.960489 C3 ================================================================== 38.963216 C3 BUG: KASAN:...

6.6CVSS6.5AI score0.00254EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/12/25 12:56 a.m.•16 views

SUSE CVE-2023-54048

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Prevent handling any completions after qp destroy HW may generate completions that indicates QP is destroyed. Driver should not be scheduling any more completion handlers for this QP, after the QP is destroyed. Since...

5.5CVSS6.3AI score0.00178EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/12/25 12:55 a.m.•16 views

SUSE CVE-2023-54106

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5einitreprx The memory pointed to by the priv-rxres pointer is not freed in the error path of mlx5einitreprx, which can lead to a memory leak. Fix by freeing the memory in the error path,...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2025/12/25 12:55 a.m.•16 views

SUSE CVE-2023-54110

In the Linux kernel, the following vulnerability has been resolved: usb: rndishost: Secure rndisquery check against int overflow Variables off and len typed as uint32 in rndisquery function are controlled by incoming RNDIS response message thus their value may be manipulated. Setting off to a...

5.5CVSS6.5AI score0.00196EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/12/20 12:29 a.m.•16 views

SUSE CVE-2025-44005

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

10CVSS7AI score0.03589EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/19 1:7 a.m.•16 views

SUSE CVE-2024-29371

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during...

7.5CVSS5.4AI score0.00261EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2025/12/13 12:25 a.m.•16 views

SUSE CVE-2025-53045

unknown...

4.9CVSS7.5AI score0.00541EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/12 1:24 a.m.•16 views

SUSE CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service crash via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference...

5CVSS6.8AI score0.07573EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•16 views

SUSE CVE-2022-50658

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix memory leak in error path If for some reason the speedbin length is incorrect, then there is a memory leak in the error path because we never free the speedbin buffer. This commit fixes the error path to always...

5.5CVSS6.5AI score0.00241EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•16 views

SUSE CVE-2022-50661

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...

5.5CVSS6.4AI score0.00241EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/09 12:31 a.m.•16 views

SUSE CVE-2022-50626

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in "dvbusbadapterinit". The leak is due to not accounting for and freeing current iteration's adapter-priv in case of an error. Currently if an err...

4.1CVSS6.6AI score0.00227EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/06 12:23 a.m.•16 views

SUSE CVE-2025-40221

In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the scan structure is zeroed before use...

6.3CVSS6.5AI score0.00181EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/11/11 12:23 a.m.•16 views

SUSE CVE-2025-64433

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mounting PVC disks into a VM...

6.5CVSS6.7AI score0.00485EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2025/10/16 11:24 p.m.•16 views

SUSE CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

7.8CVSS6.8AI score0.0014EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2025/10/09 11:23 p.m.•16 views

SUSE CVE-2025-39955

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

6.1CVSS6.4AI score0.00147EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/10/01 11:22 p.m.•16 views

SUSE CVE-2025-39923

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case for remotely-controlled or remotely-power...

6.1CVSS6.2AI score0.0014EPSS
SaveExploits0References22
Total number of security vulnerabilities5000