PT-2026-45966

These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-46039

These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10938-1 perl-HTTP-Daemon-6.170.0-1.1 on GA media

These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10934-1 libmariadbd-devel-11.8.8-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10918-1 OpenImageIO-3.1.14.0-1.1 on GA media

These are all security issues fixed in the OpenImageIO-3.1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10929-1 weblate-5.17.1-1.1 on GA media

These are all security issues fixed in the weblate-5.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10928-1 vifm-0.14.4-1.1 on GA media

These are all security issues fixed in the vifm-0.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10916-1 libgphoto2-6-2.5.34-1.1 on GA media

These are all security issues fixed in the libgphoto2-6-2.5.34-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45205

These are all security issues fixed in the cloud-hypervisor-52.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10906-1 chromedriver-148.0.7778.215-1.1 on GA media

These are all security issues fixed in the chromedriver-148.0.7778.215-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2018-25390

HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter sent to lap-peserta-perdesa-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and...

CVE-2018-25391 HaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion

HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted request that specifies the target record's id. The admin/modul/modpengurus/aksipengurus.php module=pengurus&act=hapus and...

CVE-2018-25390 HaPe PKH 1.1 SQL Injection via desa Parameter

HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter sent to lap-peserta-perdesa-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and...

CVE-2018-25389

HaPe PKH 1.1 is affected by an SQL injection vulnerability in the nama_kelompok POST parameter used by lap-anggota-kelompok-pdf.php. The vulnerability allows unauthenticated attackers to manipulate database queries, and a crafted time-based blind payload could be used to infer and extract sensiti...

Sitejo HaPe PKH 安全漏洞

Sitejo HaPe PKH is a community poverty alleviation project management system developed by Sitejo Corporation. Version 1.1 of Sitejo HaPe PKH contains a security vulnerability. This vulnerability stems from the lack of authorization for the record deletion endpoint, which may allow unauthenticated...

PT-2026-45159

These are all security issues fixed in the libsolv-demo-0.7.38-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10893-1 java-26-openjdk-26.0.1.0-1.1 on GA media

These are all security issues fixed in the java-26-openjdk-26.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45146

These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45149

These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed...

Sitejo HaPe PKH 跨站请求伪造漏洞

Sitejo HaPe PKH is a community poverty alleviation project management system developed by Sitejo Corporation. Version 1.1 of Sitejo HaPe PKH contains a cross-site request forgeing vulnerability. This vulnerability stems from the lack of verification of the request source, which may allow attacker...