Vulnerabilities

TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669

TI-2024-31348 CVE-2024-46956 · GHSA-jrvf-vccr-mvp6

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.

LOW 36

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00389 Published 2024-11-10 Partial fix CWE-125

TI-2024-31347 CVE-2024-46955 · GHSA-w9j2-h8vr-446x

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.

LOW 25

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00294 Published 2024-11-10 No fix listed CWE-125

TI-2024-31345 CVE-2024-46953 · GHSA-qxhf-m3mr-36x5

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.

LOW 36

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00388 Published 2024-11-10 Partial fix CWE-190

TI-2024-31343 CVE-2024-46951 · GHSA-38jp-8r92-cqg4

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.

LOW 36

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00357 Published 2024-11-10 Partial fix CWE-824

TI-2023-15484 CVE-2023-32182 · GHSA-wcv5-982f-xggc

Link following in SUSE Linux Enterprise Desktop 15 SP5

LOW 34

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Lea…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00301 Published 2023-09-19 Fixed in 3.7.3-150500.3.5.1 CWE-59

TI-2022-10358 CVE-2022-27239 · GHSA-mhc8-vv44-hh59

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip=…

LOW 35

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2022-04-27 Partial fix CWE-787

TI-2021-02923 CVE-2021-4034 · GHSA-qgr2-xgqv-24x8

Out-of-bounds write in polkit

CRITICAL 93KEV

A local privilege escalation vulnerability was found on polkit's pkexec utility.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.94921 Published 2022-01-28 Fixed CWE-787

TI-2020-06495 CVE-2020-8025 · GHSA-g55h-q572-52j6

outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues

MEDIUM 41

A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.…

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00475 Published 2020-08-07 Fixed in 20170707-3.24.1, 20180125-3.27.1 +2 CWE-279

Vulnerabilities

Filters