Vulnerabilidades em SUSE

253 resultados
Análise Vexday

Com 193 CVEs catalogadas, o portfólio de vulnerabilidades da SUSE apresenta uma taxa de exploração ativa abaixo da média geral do catálogo, sem nenhum registro no CISA KEV, o que sugere menor exposição imediata a ataques confirmados. Ainda assim, 26 falhas de severidade crítica merecem atenção contínua, especialmente CVE-2025-46811, que concentra o maior escore EPSS observado (0,1032) e representa o risco mais elevado de exploração no curto prazo. A falha mais recorrente por tipo é CWE-276 (permissões padrão incorretas), um padrão que frequentemente decorre de configurações inadequadas durante implantação ou atualização de pacotes. Com apenas 2 CVEs com PoC pública e 9 surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patching ativos, priorizando as críticas e monitorando a evolução do EPSS para as mais recentes.

CVE-2018-7685HIGHlibzypp does not reevaluate malicious rpms once downloadedEPSS 0.3%CVE-2021-32000LOWclone-master-clean-up: dangerous file system operationsEPSS 0.3%CVE-2024-49502MEDIUMReflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-webEPSS 0.3%CVE-2024-49503MEDIUMReflected XSS in Setup Wizard, Organization Credentials in spacewalk-webEPSS 0.3%CVE-2020-8029LOWskuba: Insecure handling of private keyEPSS 0.3%CVE-2025-53883CRITICALspacewalk-java has various XSS issues on search pageEPSS 0.3%CVE-2012-0433LOWinsecure permissions on files containing confidential dataEPSS 0.3%CVE-2025-53880HIGHsusemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversalEPSS 0.3%CVE-2024-58269MEDIUMRancher exposes sensitive information through audit logsEPSS 0.3%CVE-2020-8018HIGHUser owned /etc in SLES15-SP1-CHOST-BYOSEPSS 0.3%CVE-2020-8016MEDIUMrace condition in the packaging of texlive-filesystenEPSS 0.3%CVE-2025-46809MEDIUMMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logsEPSS 0.3%CVE-2026-88808HIGHFleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clustersEPSS 0.3%CVE-2019-3687MEDIUM"easy" permission profile allows everyone execute dumpcap and read all network trafficEPSS 0.3%CVE-2026-104623MEDIUMAuthorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management clusterEPSS 0.3%CVE-2021-25317LOWcups: ownership of /var/log/cups allows the lp user to create files as rootEPSS 0.3%CVE-2025-54471MEDIUMNeuVector is shipping cryptographic material into its binaryEPSS 0.3%CVE-2026-78428HIGHFlaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrentlyEPSS 0.3%CVE-2026-71401MEDIUMwicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds readEPSS 0.3%CVE-2026-44950CRITICALfs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2EPSS 0.3%