Lucene search
+L
SusecveMost viewed

63543 matches found

SUSE CVE
SUSE CVE
•added 2026/04/25 1:39 a.m.•16 views

SUSE CVE-2026-31572

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe race condition in kernel v7.0 with the commit 38fa29b01a6a "i2c: designware: Combine the init functions",but this issue existed from the...

4.7CVSS5.4AI score0.00088EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/25 1:38 a.m.•16 views

SUSE CVE-2026-31579

In the Linux kernel, the following vulnerability has been resolved: wireguard: device: use exitrtnl callback instead of manual rtnllock in preexit wgnetnspreexit manually acquires rtnllock inside the pernet .preexit callback. This causes a hung task when another thread holds rtnlmutex - the...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/04/25 1:38 a.m.•16 views

SUSE CVE-2026-31581

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6firechipabort, the chip struct is allocated as the card's private data via sndcardnew with sizeofstruct sfirechip. When sndcardfreewhenclosed is called and no file handles are...

6.4CVSS5.6AI score0.00128EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/04/25 1:38 a.m.•16 views

SUSE CVE-2026-31583

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xxv4l2open em28xxv4l2open reads dev-v4l2 without holding dev-lock, creating a race with em28xxv4l2init's error path and em28xxv4l2fini, both of which free the em28xxv4l2 struct and set...

7CVSS5.5AI score0.00128EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/04/25 1:36 a.m.•16 views

SUSE CVE-2026-31663

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transportfinish NFHOOK After async crypto completes, xfrminputresume calls devput immediately on re-entry before the skb reaches transportfinish. The skb-dev pointer is then used inside NFHOOK and i...

6.4CVSS5.4AI score0.00218EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/04/24 1:36 a.m.•16 views

SUSE CVE-2025-53000

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution...

7.8CVSS5.9AI score0.00264EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/04/24 1:27 a.m.•16 views

SUSE CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.3CVSS6AI score0.00182EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/04/23 1:26 a.m.•16 views

SUSE CVE-2026-31433

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in getfileallinfo for compound requests When a compound request consists of QUERYDIRECTORY + QUERYINFO FILEALLINFORMATION and the first command consumes nearly the entire maxtranssize, getfileallinfo woul...

8.8CVSS5.8AI score0.006EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/23 1:26 a.m.•16 views

SUSE CVE-2026-31459

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix paramctx leak on damonsysfsnewtestctx failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMONSYSFS can leak memory under allocation failure, and do NULL pointer dereferenc...

5.5CVSS5.6AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/23 1:25 a.m.•16 views

SUSE CVE-2026-31470

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quote are copied out to guest userspace. In TDX environments with remote...

6.5CVSS5.7AI score0.00125EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2026/04/23 1:25 a.m.•16 views

SUSE CVE-2026-31480

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with osnoise The following sequence may leads deadlock in cpu hotplug: task1 task2 task3 ----- ----- ----- mutexlock&interfacelock CPU GOING OFFLINE cpuswritelock; osnoisecpudie;...

4.7CVSS5.6AI score0.00095EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/04/22 1:39 a.m.•16 views

SUSE CVE-2026-6771

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

9.8CVSS5.7AI score0.00309EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2026/04/17 12:31 p.m.•16 views

SUSE CVE-2003-0972

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" semicolon characters in escape sequences, which leads to a buffer overflow...

10CVSS6.5AI score0.03401EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/14 11:25 p.m.•16 views

SUSE CVE-2026-34987

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch baseline non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This vulnerability requires use of the Winch...

8.5CVSS5.8AI score0.00278EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/04/14 11:25 p.m.•16 views

SUSE CVE-2026-40097

Step CA is an online certificate authority for secure, automated certificate management for DevOps. From 0.24.0 to before 0.30.0-rc3, an attacker can trigger an index out-of-bounds panic in Step CA by sending a crafted attestation key AK certificate with an empty Extended Key Usage EKU extension...

3.7CVSS5.9AI score0.00181EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/11 10:7 a.m.•16 views

SUSE CVE-2024-21050

unknown...

4.9CVSS6.5AI score0.00986EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/04/08 11:25 p.m.•16 views

SUSE CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

8.1CVSS5.9AI score0.002EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/04/03 11:27 p.m.•16 views

SUSE CVE-2026-23462

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: Fix possible UAF This fixes the following trace caused by not dropping l2capconn reference when user-remove callback is called: 97.809249 l2capconnfree: freeing conn ffff88810a171c00 97.809907 CPU: 1 UID: 0 PID:...

7.8CVSS5.7AI score0.00262EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2026/04/03 11:24 p.m.•16 views

SUSE CVE-2026-34872

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values lack of contributor...

9.1CVSS5.8AI score0.00204EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/02 11:26 p.m.•16 views

SUSE CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/28 6:29 p.m.•16 views

SUSE CVE-2026-0394

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

5.3CVSS5.7AI score0.00427EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•16 views

SUSE CVE-2026-33503

Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 26.2.0, the ListCourierMessages Admin API in Ory Kratos is vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens are encrypted using the secret configur...

7.2CVSS6AI score0.00252EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/28 12:24 a.m.•16 views

SUSE CVE-2026-33699

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...

5.3CVSS5.8AI score0.00455EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/26 2:43 p.m.•16 views

SUSE CVE-2026-33416

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through 1.6.55, pngsettRNS and pngsetPLTE each alias a heap-allocated buffer between pngstruct and pnginfo, sharing a single allocation acros...

8.1CVSS5.9AI score0.01052EPSS
SaveExploits1References31
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•16 views

SUSE CVE-2026-23300

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop When a standalone IPv6 nexthop object is created with a loopback device e.g., "ip -6 nexthop add id 100 dev lo", fib6nhinit misclassifies it as a reject route...

5.5CVSS5.7AI score0.00129EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•16 views

SUSE CVE-2026-23303

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•16 views

SUSE CVE-2026-23305

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocketprobe When rocketcoreinit fails as could be the case with EPROBEDEFER, we need to properly unwind by decrementing the counter we just incremented and if this is the first core we...

7.1CVSS5.7AI score0.00124EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•16 views

SUSE CVE-2026-23307

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: emsusbreadbulkcallback: check the proper length of a message When looking at the data in a USB urb, the actuallength is the size of the buffer passed to the driver, not the transferbufferlength which is set by the...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•16 views

SUSE CVE-2026-23327

In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxlpayloadfromuserallowed cxlpayloadfromuserallowed casts and dereferences the input payload without first verifying its size. When a raw mailbox command is sent with a...

5.5CVSS5.7AI score0.00124EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•16 views

SUSE CVE-2026-4718

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

5CVSS7.2AI score0.00299EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•16 views

SUSE CVE-2026-4719

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.3CVSS7.2AI score0.00433EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•16 views

SUSE CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

6.3CVSS7.2AI score0.00313EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:25 a.m.•16 views

SUSE CVE-2026-30861

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution RCE vulnerability exists in the MCP stdio configuration validation. The application allows unrestricted user...

9.9CVSS6.6AI score0.02054EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:24 a.m.•16 views

SUSE CVE-2026-32245

Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC token endpoint does not verify that the client exchanging an authorization code is the same client the code was issued to. A malicious OIDC client operator can exchange another client's authorization code using their...

6.5CVSS5.9AI score0.0025EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:23 a.m.•16 views

SUSE CVE-2026-33554

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system managemen...

7.6CVSS6AI score0.00403EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/03/22 12:26 a.m.•16 views

SUSE CVE-2026-3479

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.getdata did...

3.3CVSS5.7AI score0.00238EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/03/20 10:28 a.m.•16 views

SUSE CVE-2012-0439

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...

9.3CVSS6.2AI score0.39183EPSS
SaveExploits9References4
SUSE CVE
SUSE CVE
•added 2026/03/17 12:26 a.m.•16 views

SUSE CVE-2026-3644

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...

6.5CVSS5.8AI score0.00478EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2026/03/13 1:59 p.m.•16 views

SUSE CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

4.3CVSS5.8AI score0.00301EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2026/03/11 12:24 a.m.•16 views

SUSE CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/03/06 12:28 a.m.•16 views

SUSE CVE-2025-69534

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown...

7.5CVSS5.8AI score0.00566EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2026/02/27 12:25 a.m.•16 views

SUSE CVE-2026-25941

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory...

4.3CVSS5.9AI score0.00284EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2026/02/25 12:24 a.m.•16 views

SUSE CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6AI score0.00161EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/02/25 12:24 a.m.•16 views

SUSE CVE-2026-25987

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

5.3CVSS5.9AI score0.0037EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/02/20 12:25 a.m.•16 views

SUSE CVE-2026-22860

Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, Rack::Directory's path check used a string prefix match on the expanded path. A request like /../rootexample/ can escape the configured root if the target path starts with the root string, allowing directory...

7.5CVSS6.4AI score0.00665EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/02/19 12:26 a.m.•16 views

SUSE CVE-2026-23219

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Add alloctaggingslabfreehook for memcgallocabortsingle When CONFIGMEMALLOCPROFILINGDEBUG is enabled, the following warning may be noticed: 3959.023862 ------------ cut here ------------ 3959.023891 alloctag was not clear...

5.5CVSS5.6AI score0.00112EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/02/17 12:26 a.m.•16 views

SUSE CVE-2025-71201

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read result collection for buffered reads seems to run ahead of the completion of subrequests under some circumstances, as can be seen in the following log snippet:...

5.5CVSS5.3AI score0.00117EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/02/05 12:47 a.m.•16 views

SUSE CVE-2025-13473

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The django.contrib.auth.handlers.modwsgi.checkpassword function for authentication via modwsgi allows remote attackers to enumerate users via a timing attack. Earlier, unsupported Django series such as 5.0.x,...

7.5CVSS5.4AI score0.00713EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/02/01 12:23 a.m.•16 views

SUSE CVE-2026-23027

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvmdevice leak in kvmpchpicdestroy In kvmioctlcreatedevice, kvmdevice has allocated memory, kvmdevice-destroy seems to be supposed to free its kvmdevice struct, but kvmpchpicdestroy is not currently doing this...

5.7AI score0.00194EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/30 12:43 a.m.•16 views

SUSE CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00275EPSS
SaveExploits0References3
Total number of security vulnerabilities5000