Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2026/06/26 2:9 a.m.•14 views

SUSE CVE-2026-53214

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cleanupprefixroute addrconfgetprefixroute can return the fib6nullentry sentinel entry which has a NULL fib6table pointer. Therefore, before setting the route's expiration time, check that we are not...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:9 a.m.•14 views

SUSE CVE-2026-53216

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM pools, and short pool buffers can be smaller than PAGESIZE. The XDP path nevertheless initializes every xdpbuff with PAGESIZE as frame size. XDP helper...

6.7CVSS5.9AI score0.00502EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/06/26 2:9 a.m.•14 views

SUSE CVE-2026-53229

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdpframe leak on XDPTX xmit failure In the XSK branch of mlx5exmitxdpbuff, when sq-xmitxdpframe returns false e.g. XDPSQ is full, the function returns without unmapping the DMA address or freeing the...

5.5CVSS5.8AI score0.00441EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/06/26 2:9 a.m.•14 views

SUSE CVE-2026-53240

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free on firstskb in inputprocesspayload inputprocesspayload stores firstskb into xtfs-ranewskb under droplock when starting partial reassembly, then unlocks and breaks out of the processing loop. The...

8.8CVSS5.8AI score0.0039EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct sndseqevent into a stack temporary, rewriting source and destination, and dispatching the temporary to...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53244

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

7.5CVSS5.8AI score0.00344EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53246

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP server processes a COOKIEECHO chunk, the cached peer INIT chunk embedded after the cookie is parsed and its parameters are later walked b...

8.6CVSS6AI score0.00442EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53248

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix use-after-free in metadata dst teardown airohametadatadstfree runs metadatadstfree which frees the metadatadst with kfree immediately, bypassing the RCU grace period. In the RX path, skbdstsetnoref sets a...

8.8CVSS5.8AI score0.00353EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53251

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on isoconnbigsync hcigetroute returns a reference-counted hcidev pointer via hcidevhold. The function exits normally or with an error without ever releasing it...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53256

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcommconnectind rfcommgetsockbychannel scans rfcommsklist under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcommconnectind th...

7.5CVSS5.8AI score0.00248EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53260

In the Linux kernel, the following vulnerability has been resolved: tcp: Add preemptdisable,enablenested in reqskqueuehashreq. syzbot reported a weird reqsk-rskrefcnt underflow in inetcskreqskqueuedrop. The captured reqskput in inetcskreqskqueuedrop is called only when it successfully removes req...

9.8CVSS5.8AI score0.00369EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

5.5CVSS5.8AI score0.00344EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/26 2:8 a.m.•14 views

SUSE CVE-2026-53269

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can ra...

5.8AI score0.00114EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:7 a.m.•14 views

SUSE CVE-2026-53271

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo-conn in oplock/lease break notifiers smb2oplockbreaknoti and smb2leasebreaknoti read opinfo-conn into a local with neither READONCE nor a NULL check. Both run from oplockbreak after opinfogetlist h...

5.8AI score0.00114EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:7 a.m.•14 views

SUSE CVE-2026-53275

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the multicast group address is retrieved when initially parsing the packet. This pointer is later dereferenced without being...

8.8CVSS5.8AI score0.00232EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:7 a.m.•14 views

SUSE CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/26 2:7 a.m.•14 views

SUSE CVE-2026-57435

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node,...

7.5CVSS5.8AI score0.00368EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/25 2:20 a.m.•14 views

SUSE CVE-2026-48779

ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally...

6.5CVSS5.8AI score0.00782EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/06/25 2:20 a.m.•14 views

SUSE CVE-2026-52912

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: hold bridge skb-dev while queued brpassframeup rewrites skb-dev from the ingress port to the bridge master before queueing bridge LOCALIN packets. NFQUEUE only holds references on state.in/out and bridge...

7.8CVSS5.7AI score0.00142EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/25 2:20 a.m.•14 views

SUSE CVE-2026-52919

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix tpmeter counter underflow during shutdown batadvtpsendershutdown unconditionally decrements the "sending" atomic counter. If multiple paths e.g. timeout, user cancel, and normal finish call this function, the...

7.8CVSS5.7AI score0.00117EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/06/25 2:20 a.m.•14 views

SUSE CVE-2026-52923

In the Linux kernel, the following vulnerability has been resolved: ipc: limit nextid allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids-nextid. ipcidralloc currently forwards that request to idralloc with an open-ended upper bound. If...

7.8CVSS5.7AI score0.00134EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2026/06/25 2:20 a.m.•14 views

SUSE CVE-2026-52924

In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...

7CVSS5.8AI score0.00331EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2026/06/25 2:19 a.m.•14 views

SUSE CVE-2026-52944

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE FSCTLSETSPARSE in fsctlsetsparse modifies the file's sparse attribute and saves it through xattr without any permission checks. This exposes two...

5.8AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/25 2:19 a.m.•14 views

SUSE CVE-2026-54514

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddresshost, port, which performs eager DNS name resolution fo...

5.3CVSS5.9AI score0.00219EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/23 2:31 a.m.•14 views

SUSE CVE-2025-70102

A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...

5.5CVSS5.9AI score0.00169EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/23 2:31 a.m.•14 views

SUSE CVE-2026-2303

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

5.4CVSS5.9AI score0.00223EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/23 2:28 a.m.•14 views

SUSE CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...

8CVSS6.2AI score0.00404EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/23 2:20 a.m.•14 views

SUSE CVE-2026-48715

radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, printff copies up to 2032 bytes from attacker-controlled...

7.5CVSS6.1AI score0.00203EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/23 2:20 a.m.•14 views

SUSE CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

5.5CVSS6AI score0.00186EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/23 2:19 a.m.•14 views

SUSE CVE-2026-56367

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB PSD v2 RLE decoding path ReadPSDChannelRLE in coders/psd.c that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash...

4.8CVSS5.9AI score0.00236EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/20 2:29 a.m.•14 views

SUSE CVE-2026-48615

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...

7.5CVSS6.8AI score0.00421EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/06/20 2:29 a.m.•14 views

SUSE CVE-2026-48934

A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

6.5CVSS6.1AI score0.00258EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2026/06/20 2:29 a.m.•14 views

SUSE CVE-2026-48936

A flaw in Node.js Permission API can cause a local server to be started via a Unix domain socket, even without the --allow-net permission. This vulnerability affects one supported release line: Node.js 26...

3.3CVSS6AI score0.00154EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/20 2:29 a.m.•14 views

SUSE CVE-2026-54276

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...

6.3CVSS5.9AI score0.00178EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/20 2:28 a.m.•14 views

SUSE CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

6.9CVSS6.1AI score0.00107EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/19 1:58 a.m.•14 views

SUSE CVE-2026-6045

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small...

6.6CVSS5.6AI score0.0012EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12437

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.3AI score0.00299EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12440

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS5.3AI score0.00251EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12441

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS5.5AI score0.00301EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 2:0 a.m.•14 views

SUSE CVE-2026-12443

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6AI score0.00613EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•14 views

SUSE CVE-2026-12456

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. Chromium security severity: High...

4.2CVSS5.2AI score0.00137EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•15 views

SUSE CVE-2026-12466

Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00426EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:59 a.m.•14 views

SUSE CVE-2026-12467

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.3AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/18 1:54 a.m.•14 views

SUSE CVE-2026-48020

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a...

10CVSS5.9AI score0.00866EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2026/06/16 2:23 a.m.•14 views

SUSE CVE-2026-11774

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, adding sizeofuint32t to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer...

7.6CVSS5.9AI score0.00796EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/16 2:20 a.m.•14 views

SUSE CVE-2026-46340

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.putstreamId, Unpooled.wrappedBufferfrag, byteBuf, wrapping t...

7.5CVSS5.5AI score0.00461EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/16 2:20 a.m.•14 views

SUSE CVE-2026-47162

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in the netrw plugin runtime/pack/dist/opt/netrw/autoload/netrw.vim when serializing browsed directory paths to the history file /.vim/.netrwhist. A...

7.8CVSS5.8AI score0.0025EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/15 1:20 a.m.•14 views

SUSE CVE-2026-53533

unknown...

5.3AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12007

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6.1AI score0.00287EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•14 views

SUSE CVE-2026-12013

Determined not a vulnerability...

5.2AI score0.0024EPSS
SaveExploits0References3
Total number of security vulnerabilities5000