Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12330

Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12...

5.4CVSS5.2AI score0.00164EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12437

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.3AI score0.00299EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12440

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS5.3AI score0.00251EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12441

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS5.5AI score0.00301EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12443

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6AI score0.00613EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•14 views

SUSE CVE-2026-12456

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. Chromium security severity: High...

4.2CVSS5.2AI score0.00137EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•15 views

SUSE CVE-2026-12466

Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00426EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•14 views

SUSE CVE-2026-12467

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.3AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:54 a.m.•14 views

SUSE CVE-2026-48020

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a...

10CVSS5.9AI score0.00866EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2026/06/16 2:23 a.m.•14 views

SUSE CVE-2026-11774

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, adding sizeofuint32t to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer...

7.6CVSS5.9AI score0.00796EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/16 2:20 a.m.•14 views

SUSE CVE-2026-46340

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.putstreamId, Unpooled.wrappedBufferfrag, byteBuf, wrapping t...

7.5CVSS5.5AI score0.00461EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/16 2:20 a.m.•14 views

SUSE CVE-2026-47162

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in the netrw plugin runtime/pack/dist/opt/netrw/autoload/netrw.vim when serializing browsed directory paths to the history file /.vim/.netrwhist. A...

7.8CVSS5.8AI score0.0025EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/16 2:19 a.m.•14 views

SUSE CVE-2026-54411

Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the...

5.9CVSS5.4AI score0.00333EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/06/15 1:20 a.m.•14 views

SUSE CVE-2026-53533

unknown...

5.3AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12007

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6.1AI score0.00287EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12013

Determined not a vulnerability...

5.2AI score0.0024EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12016

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.4AI score0.00229EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12019

Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00253EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12030

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.3AI score0.00191EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12033

Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

5.3CVSS5.3AI score0.00189EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:19 a.m.•14 views

SUSE CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

5.7CVSS5.3AI score0.00996EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2026/06/13 2:19 a.m.•14 views

SUSE CVE-2026-42767

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...

6.5CVSS5.4AI score0.00557EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/06/13 2:17 a.m.•14 views

SUSE CVE-2026-45446

Issue summary: The implementations of AES-SIV RFC 5297 and AES-GCM-SIV RFC 8452 mishandle the authentication of AAD Additional Authenticated Data with an empty ciphertext allowing a forgery of such messages. Impact summary: An attacker can forge empty messages with arbitrary AAD to the victim's...

5.3CVSS5.7AI score0.00363EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/06/13 2:17 a.m.•14 views

SUSE CVE-2026-46433

lldpd is an implementation of IEEE 802.1ab LLDP. Prior to version 1.0.22, lldpddecode in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove to shift the frame payload 4 bytes left. The third argument byte count is s - 2 ETHERADDRLEN but should be s - 2...

6.5CVSS5.4AI score0.00225EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/12 2:32 a.m.•14 views

SUSE CVE-2026-11792

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the createmaskedentrystring function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged requiri...

3.3CVSS5.7AI score0.00258EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/12 2:32 a.m.•14 views

SUSE CVE-2026-11822

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bound...

7.8CVSS6.5AI score0.00175EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/06/12 2:31 a.m.•14 views

SUSE CVE-2026-11850

An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a prior bounds check. When bvlen is 0 or 1, the subtraction wraps to a large value which is then...

5.9CVSS5.4AI score0.00261EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/06/12 2:26 a.m.•14 views

SUSE CVE-2026-45106

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose content reaches those fields stores HTML and CSS that runs inside the authenticated editor of every user who runs a...

4.6CVSS5.2AI score0.00208EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/12 2:26 a.m.•14 views

SUSE CVE-2026-45358

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder. This issue has been patched in versions 6.9.13-47...

3.3CVSS5.2AI score0.0024EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/06/12 2:26 a.m.•14 views

SUSE CVE-2026-45359

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation. This issue has been...

5.7CVSS5.4AI score0.00122EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/06/12 2:26 a.m.•14 views

SUSE CVE-2026-45624

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific arguments. This issue has been patched in...

5.1CVSS5.2AI score0.0012EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/12 2:25 a.m.•14 views

SUSE CVE-2026-47712

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.formatpatchoutdir=... derives each patch filename from the commit's subject line. Prior to this fix, getsummary only replaced spaces with dashes ...

3.3CVSS5.3AI score0.00139EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/12 2:25 a.m.•14 views

SUSE CVE-2026-50266

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...

2.2CVSS5.3AI score0.00262EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/11 11:14 a.m.•14 views

SUSE CVE-2026-48733

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24...

4.7CVSS5.2AI score0.00093EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/11 11:14 a.m.•14 views

SUSE CVE-2026-49218

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched...

5.5CVSS5.2AI score0.00346EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/11 11:13 a.m.•14 views

SUSE CVE-2026-53460

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 a...

5.5CVSS5.2AI score0.00346EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11642

Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.5AI score0.00231EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11645

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.0219EPSS
SaveExploits4References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11649

Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00314EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11652

Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.5AI score0.00242EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11654

Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.5AI score0.00252EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•14 views

SUSE CVE-2026-11662

Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00359EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11680

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00243EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11682

Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.5AI score0.00192EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11686

Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.5AI score0.00171EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11687

Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.5AI score0.00203EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11693

Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

8.1CVSS5.4AI score0.00184EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:30 a.m.•14 views

SUSE CVE-2026-11697

Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.5AI score0.00203EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:29 a.m.•14 views

SUSE CVE-2026-29167

Use After Free vulnerability in Apache HTTP Server with modldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

5.3CVSS5.4AI score0.00688EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/10 2:28 a.m.•14 views

SUSE CVE-2026-42535

A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

5.5CVSS5.3AI score0.00538EPSS
SaveExploits0References9
Total number of security vulnerabilities5000