Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2026/04/15 11:25 p.m.•15 views

SUSE CVE-2026-40312

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.1.2-19...

6.2CVSS5.7AI score0.00177EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/04/09 11:29 p.m.•15 views

SUSE CVE-2026-5892

Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. Chromium security severity: Medium...

7.3AI score0.0017EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/08 11:26 p.m.•15 views

SUSE CVE-2026-28808

Incorrect Authorization vulnerability in Erlang OTP inets modules allows unauthenticated access to CGI scripts protected by directory rules when served via scriptalias. When scriptalias maps a URL prefix to a directory outside DocumentRoot, modauth evaluates directory-based access controls agains...

7.4CVSS7.2AI score0.00541EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/04/08 11:24 p.m.•15 views

SUSE CVE-2026-35406

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1...

6.2CVSS5.8AI score0.00383EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/04/03 11:25 p.m.•15 views

SUSE CVE-2026-34601

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. In xmldom versions 0.6.0 and prior and @xmldom/xmldom prior to versions 0.8.12 and 0.9.9, xmldom/xmldom allows attacker-controlled strings containing the CDATA terminator to be inserted into a...

7.5CVSS5.7AI score0.00472EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/03 11:24 p.m.•15 views

SUSE CVE-2026-34871

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator PRNG...

6.7CVSS5.8AI score0.00192EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/31 11:29 p.m.•15 views

SUSE CVE-2026-0396

An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI...

3.1CVSS5.8AI score0.00136EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/03/28 6:29 p.m.•15 views

SUSE CVE-2026-0394

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

5.3CVSS5.7AI score0.00427EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/28 12:24 a.m.•15 views

SUSE CVE-2026-33699

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...

5.3CVSS5.8AI score0.00455EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/28 12:24 a.m.•15 views

SUSE CVE-2026-33897

Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arbitrary read or writes as root on the host server. Incus allows for pongo2 templates within instances which can be used at various times in the instance lifecycle to...

8.8CVSS6AI score0.00481EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•15 views

SUSE CVE-2026-23307

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: emsusbreadbulkcallback: check the proper length of a message When looking at the data in a USB urb, the actuallength is the size of the buffer passed to the driver, not the transferbufferlength which is set by the...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•15 views

SUSE CVE-2026-23308

In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbrirqmask' and 'eqbrirqack' are also called in the callback function 'eqbrirqmaskack'. This is done to avoid source code duplication. The problem, is that ...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/03/25 4:55 p.m.•15 views

SUSE CVE-2026-23359

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack-out-of-bounds write in devmap getupperifindexes iterates over all upper devices and writes their indices into an array without checking bounds. Also the callers assume that the max number of upper devices is...

5.6CVSS5.8AI score0.00131EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/03/25 4:55 p.m.•15 views

SUSE CVE-2026-23360

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvmeallocadmintagset is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queu...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/03/25 4:55 p.m.•15 views

SUSE CVE-2026-23362

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcmop runtime updates Commit c2aba69d0c36 "can: bcm: add locking for bcmop runtime updates" added a locking for some variables that can be modified at runtime when updating the sending bcmop with a new...

5.5CVSS5.7AI score0.00095EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•15 views

SUSE CVE-2026-4719

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.3CVSS7.2AI score0.00433EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•15 views

SUSE CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

6.3CVSS7.2AI score0.00313EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:28 a.m.•15 views

SUSE CVE-2026-25921

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS objects are vulnerable to be maliciously overwritten by malicious attackers. This issue has been patched in version 0.14.2...

9.3CVSS6.6AI score0.00327EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:25 a.m.•15 views

SUSE CVE-2026-30859

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, mod...

6.5CVSS5.8AI score0.00213EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:24 a.m.•15 views

SUSE CVE-2026-32245

Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC token endpoint does not verify that the client exchanging an authorization code is the same client the code was issued to. A malicious OIDC client operator can exchange another client's authorization code using their...

6.5CVSS5.9AI score0.0025EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/03/19 12:27 a.m.•15 views

SUSE CVE-2026-23243

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite computes datalen from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, datalen can become negative and...

7.8CVSS5.6AI score0.00131EPSS
SaveExploits0References105
SUSE CVE
SUSE CVE
•added 2026/03/14 12:25 a.m.•15 views

SUSE CVE-2026-3497

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpktdisconnect on an error, which does not terminate the...

6.5CVSS6AI score0.0218EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/03/11 12:24 a.m.•15 views

SUSE CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/02/17 12:24 a.m.•15 views

SUSE CVE-2026-23133

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dmafreecoherent pointer dmaalloccoherent allocates a DMA mapped buffer and stores the addresses in XXXunaligned fields. Those should be reused when freeing the buffer rather than the aligned addresses...

4.7CVSS5.3AI score0.00123EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2026/02/05 12:47 a.m.•15 views

SUSE CVE-2025-13473

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The django.contrib.auth.handlers.modwsgi.checkpassword function for authentication via modwsgi allows remote attackers to enumerate users via a timing attack. Earlier, unsupported Django series such as 5.0.x,...

7.5CVSS5.4AI score0.00713EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/02/01 12:23 a.m.•15 views

SUSE CVE-2026-23037

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: allow partial RX URB allocation to succeed When es58xallocrxurbs fails to allocate the requested number of URBs but succeeds in allocating some, it returns an error code. This causes es58xopen to return early,...

3.3CVSS5.7AI score0.00217EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2026/01/30 12:43 a.m.•15 views

SUSE CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00275EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/30 12:27 a.m.•15 views

SUSE CVE-2025-69421

Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS12 files. The PKCS12itemdecryptd2iex...

6.2CVSS6.2AI score0.00844EPSS
SaveExploits1References23
SUSE CVE
SUSE CVE
•added 2026/01/30 12:25 a.m.•15 views

SUSE CVE-2026-22261

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve...

5.3CVSS5.9AI score0.00312EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/28 12:29 a.m.•15 views

SUSE CVE-2025-13465

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the .unset and .omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their original...

8.2CVSS5.9AI score0.01535EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
•added 2026/01/27 12:28 a.m.•15 views

SUSE CVE-2025-68671

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. LakeFS's S3 gateway does not validate timestamps in authenticated requests, allowing replay attacks. Prior to 1.75.0, an attacker who captures a valid signed request e.g., through network interception, logs...

6.5CVSS5.9AI score0.00248EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/01/26 12:24 a.m.•15 views

SUSE CVE-2026-23003

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv Blamed commit did not take care of VLAN encapsulations as spotted by syzbot 1. Use skbvlaninetprepare instead of pskbinetmaypull. 1 BUG: KMSAN: uninit-value in INETECNdecapsulate...

6.6CVSS5.2AI score0.00468EPSS
SaveExploits1References20
SUSE CVE
SUSE CVE
•added 2026/01/25 12:24 a.m.•15 views

SUSE CVE-2025-71158

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash. The sealevel hardware this driver was written for was not hotpluggable, so I never realized it. This change uses a...

5.5CVSS5.3AI score0.00144EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/25 12:24 a.m.•15 views

SUSE CVE-2025-71161

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

5.5CVSS5.3AI score0.00341EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/01/17 12:51 a.m.•15 views

SUSE CVE-2017-18895

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to obtain sensitive information user statuses via a REST API version 4 endpoint...

5.3CVSS6.6AI score0.0092EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/14 12:34 a.m.•15 views

SUSE CVE-2022-21592

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.7.39 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...

4.3CVSS4.8AI score0.00671EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/09 12:35 a.m.•15 views

SUSE CVE-2024-53866

The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't revalidate the data including on first...

9.8CVSS7.9AI score0.00942EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/01/06 12:28 a.m.•15 views

SUSE CVE-2025-12559

Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/channelid/commonteams endpoint...

4.3CVSS6.8AI score0.0021EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:28 a.m.•15 views

SUSE CVE-2025-12689

Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...

6.5CVSS7AI score0.00279EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:25 a.m.•15 views

SUSE CVE-2025-65795

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request...

7.5CVSS6.9AI score0.00249EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•15 views

SUSE CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

5.5CVSS6.5AI score0.00223EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•15 views

SUSE CVE-2022-50832

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential memory leak in wilcmacxmit The wilcmacxmit returns NETDEVTXOK without freeing skb, add devkfreeskb to fix it. Compile tested only...

5.5CVSS6.5AI score0.0022EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•15 views

SUSE CVE-2022-50833

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use hdev-workqueue when queuing hdev-cmd,ncmdtimer works syzbot is reporting attempt to schedule hdev-cmdwork work from systemwq WQ into hdev-workqueue WQ which is under draining operation 1, for commit c8efcc2589464ac...

5.5CVSS6.4AI score0.00206EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•15 views

SUSE CVE-2022-50835

In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer head in fcdoonepass In fcdoonepass miss release buffer head after use which will lead to reference count leak...

5.5CVSS6.8AI score0.00209EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•15 views

SUSE CVE-2022-50841

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add overflow check for attribute size The offset addition could overflow and pass the used size check given an attribute with very large size e.g., 0xffffff7f while parsing MFT attributes. This could lead to out-of-boun...

6.5AI score0.00196EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/30 12:31 a.m.•15 views

SUSE CVE-2018-25153

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported issue does not constitute a security vulnerability and represents a minor, non-exploitable memory leak...

6.1AI score0.00028EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/30 12:23 a.m.•15 views

SUSE CVE-2025-68973

In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For ExtendedLTS, 2.2.51 and later are fixed versions...

8CVSS6.8AI score0.00132EPSS
SaveExploits1References17
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•15 views

SUSE CVE-2022-50701

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus operation. If the tailroom of this skb is not big enough, we would access invalid memory region. For low level...

5.5CVSS6.5AI score0.00132EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•15 views

SUSE CVE-2022-50707

In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtiocryptoalgskcipherclosesession 'vcctrlreq' is alloced in virtiocryptoalgskcipherclosesession, and should be freed in the invalid ctrlstatus-status error handling case. Otherwise there is a...

6.5AI score0.00179EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/25 1:5 a.m.•15 views

SUSE CVE-2022-50714

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix rmmod crash in driver reload test In insmod/rmmod stress test, the following crash dump shows up immediately. The problem is caused by missing mt76dev in mt7921pciremove. We should make sure the drvdata i...

7CVSS6.4AI score0.00216EPSS
SaveExploits0References6
Total number of security vulnerabilities5000