OPENSUSE-SU-2026:10083-1 vlang-0.5-2.1 on GA media

These are all security issues fixed in the vlang-0.5-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-4156

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through = 2.1...

OPENSUSE-SU-2026:10073-1 alloy-1.12.2-2.1 on GA media

These are all security issues fixed in the alloy-1.12.2-2.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 8 : mailman:2.1 (AXSA:2022-2979:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2979:01 advisory. mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover CVE-2021-44227 Tenable has extracted the preceding description block directly fr...

libraylib550-5.5-2.1 on GA media (moderate)

libraylib550-5.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:10071-1 Rating: moderate Cross-References: CVE-2025-15533 CVE-2025-15534 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

python-keystonemiddleware-doc-10.12.0-2.1 on GA media (moderate)

python-keystonemiddleware-doc-10.12.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10070-1 Rating: moderate Cross-References: CVE-2026-22797 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed i...

OPENSUSE-SU-2026:10070-1 python-keystonemiddleware-doc-10.12.0-2.1 on GA media

These are all security issues fixed in the python-keystonemiddleware-doc-10.12.0-2.1 package on the GA media of openSUSE Tumbleweed...

harfbuzz-devel-12.3.0-2.1 on GA media (moderate)

harfbuzz-devel-12.3.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10065-1 Rating: moderate Cross-References: CVE-2026-22693 CVSS scores: CVE-2026-22693 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-22693 SUSE : 6.9...

OPENSUSE-SU-2026:10069-1 heroic-games-launcher-2.18.1-2.1 on GA media

These are all security issues fixed in the heroic-games-launcher-2.18.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10038-1 fluidsynth-2.5.2-2.1 on GA media

These are all security issues fixed in the fluidsynth-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2020-12128

DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path...

CVE-2020-24723

Cross Site Scripting XSS vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1...

CVE-2023-40672

Missing Authorization vulnerability in Hardik Chavada Sticky Social Media Icons.This issue affects Sticky Social Media Icons: from n/a through 2.1...

CVE-1999-0319

Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...

CVE-2019-7872

An insecure direct object reference IDOR vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing us...

PT-2026-1631

Name of the Vulnerable Software and Affected Versions Mstoic Shortcodes plugin for WordPress versions prior to 2.1 Description The Mstoic Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting. This occurs through the start parameter of the ms youtube embeds shortcode due t...

PT-2026-1439

Name of the Vulnerable Software and Affected Versions NJHYST HY511 POE core versions prior to 2.1 NJHYST HY511 POE plugins versions prior to 0.1 Description The device exhibits insufficient cookie verification, enabling an attacker to directly request the configuration file address and download t...

PT-2026-1294

Name of the Vulnerable Software and Affected Versions Employee Leave Management System version 2.1 Description A Cross Site Request Forgery issue exists in Employee Leave Management System version 2.1. A remote attacker can potentially escalate privileges through the manage-employee.php component...

PT-2025-54178

Name of the Vulnerable Software and Affected Versions FastBee versions prior to 2.1 Description A flaw exists in the SIP Message Handler component of FastBee, specifically within the getRootElement function located in the file...

CVE-2025-15170

A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of the file /home.jsp?isError=true of the component Error Message Handler. The manipulation of the argument Message leads to cross site scripting. It is possible to initiate the...