Suse linux enterprise module for high performance computing

This hub aggregates every CVE we track for Suse linux enterprise module for high performance computing, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Suse linux enterprise module for high performance computing.

• CVE-2025-43904In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.4.2Jan 16, 2026
• CVE-2025-47807In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.5.5Aug 7, 2025
• CVE-2025-27144Go JOSE's Parsing Vulnerable to Denial of Service7.5Feb 24, 2025
• CVE-2024-0149NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information...3.3Jan 28, 2025
• CVE-2024-10459An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR...7.5Oct 29, 2024
• CVE-2022-4378A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate ...7.8Jan 5, 2023
• CVE-2022-43548A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does...8.1Dec 5, 2022
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thu...KEV7.8Mar 7, 2022
• CVE-2019-10081HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory co...7.5Aug 15, 2019
• CVE-2019-12838SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.9.8Jul 11, 2019
• CVE-2019-6438SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.9.8Jan 31, 2019
• CVE-2017-7791On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert ...5.3Jun 11, 2018
• CVE-2017-7787Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. T...7.5Jun 11, 2018
• CVE-2017-7785A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thu...9.8Jun 11, 2018
• CVE-2017-18266The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attacke...8.8May 10, 2018