Vulnerabilidades em SUSE

214 resultados
Análise Vexday

Com 193 CVEs catalogadas, o portfólio de vulnerabilidades da SUSE apresenta uma taxa de exploração ativa abaixo da média geral do catálogo, sem nenhum registro no CISA KEV, o que sugere menor exposição imediata a ataques confirmados. Ainda assim, 26 falhas de severidade crítica merecem atenção contínua, especialmente CVE-2025-46811, que concentra o maior escore EPSS observado (0,1032) e representa o risco mais elevado de exploração no curto prazo. A falha mais recorrente por tipo é CWE-276 (permissões padrão incorretas), um padrão que frequentemente decorre de configurações inadequadas durante implantação ou atualização de pacotes. Com apenas 2 CVEs com PoC pública e 9 surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patching ativos, priorizando as críticas e monitorando a evolução do EPSS para as mais recentes.

CVE-2021-25313HIGHRancher: XSS on /v3/cluster/EPSS 1.5%CVE-2022-21952HIGHSUMA unauthenticated remote DoS via resource exhaustionEPSS 1.5%CVE-2011-4181MEDIUMopen build service information leak via unauthorized source accessEPSS 1.4%CVE-2019-3681HIGHosc: stores downloaded (supposed) RPM in network-controlled filesystem pathsEPSS 1.4%CVE-2018-17953HIGHpam_access does not handle netmask matches correctlyEPSS 1.3%CVE-2011-0467HIGHSQL injection in SUSE studio via select parameterEPSS 1.3%CVE-2026-44939CRITICALCommand injection through unsanitized YAML parameter in RancherEPSS 1.3%CVE-2017-9286HIGHnextcloud package security issues with /srv/www/htdocsEPSS 1.2%CVE-2019-18906CRITICALcryptctl: client side password hashing is equivalent to clear text password storageEPSS 1.1%CVE-2021-36776HIGHSteve API proxy impersonationEPSS 1.1%CVE-2011-3172MEDIUMunix2_chkpwd do not check for a valid accountEPSS 1.0%CVE-2017-14807HIGHSQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsiteEPSS 1.0%CVE-2018-12476MEDIUMobs-service-extract_file's outfilename parameter allows to write files outside of package directoryEPSS 1.0%CVE-2018-20106MEDIUMSMB printer settings don't escape characters in passwords properlyEPSS 1.0%CVE-2017-14798HIGHlocal privilege escalation in SUSE postgresql init scriptEPSS 1.0%CVE-2022-43758HIGHRancher: Command injection in Git packageEPSS 1.0%CVE-2022-31248MEDIUMSUMA user enumeration via weak error messageEPSS 1.0%CVE-2021-36775HIGHDeleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindingsEPSS 1.0%CVE-2019-3683HIGHkeystone_json_assignment backend granted access to any project for users in user-project-map.jsonEPSS 0.9%CVE-2024-22033MEDIUMobs-service-download_url is vulnerable to argument injectionEPSS 0.9%