SUSE-SU-2026:2764-1 Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: - Non customer facing changes...

Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Security issue fixed: CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: Non customer facing changes...

CVE-2022-49183

creationtimestamp| type| source ---|---|--- 2026-07-06 05:47:09+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2022-35167

creationtimestamp| type| source ---|---|--- 2026-07-06 03:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpx5lv6udx2n...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50373)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50373 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39668793 CVE-2026-46331 - net: skbuff: fix missing zerocop...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2021-33036 DESCRIPTION: In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can...

CVE-2022-4990

creationtimestamp| type| source ---|---|--- 2026-07-03 06:18:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppvm2qp6b2t 2026-07-03 19:38:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprccarkbf23...

CVE-2022-4989

creationtimestamp| type| source ---|---|--- 2026-07-03 06:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuzyti5h22 2026-07-03 19:37:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprcbj4ze42w...

CVE-2022-4989

CVE-2022-4989 affects the ASUS AI Suite 3 driver. The root cause is improper validation of a specified quantity in input, enabling a local user to craft IOCTL requests that access unintended memory regions and escalate privileges. The CVSS indicates high impact to confidentiality, integrity, and ...

CVE-2022-4989

UNSUPPORTED WHEN ASSIGNED Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS...

openSUSE 16: libopenbabel8 / openbabel / openbabel-devel / openbabel-gui / etc (openSUSE-SU-2026:21190-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21190-1 advisory. Changes in openbabel: - Update to version 3.2.0: Add an L-BFGS optimizer, used by default for gen3d and conformer searches New macrocycle ring...

CVE-2022-50973

Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST request with attacker-controlled filepath and filename parameters without any...

CVE-2022-39306 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2022-31097 vulnerabilities

Vulnerabilities for packages: grafana-fips...

IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.6 (7278745)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.6 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7278745 advisory. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of...

Security Bulletin: Multiple vulnerabilities reported in jQuery library shipped in IBM WebSphere eXtreme Scale Monitoring Console

Summary Multiple vulnerabilities reported in jQuery library shipped in IBM WebSphere eXtreme Scale Monitoring Console CVE-2020-11023, CVE-2020-7656,CVE-2019-11358,CVE-2021-41182,CVE-2021-41183,CVE-2021-41184,CVE-2022-31160 Vulnerability Details CVEID:CVE-2020-11023 DESCRIPTION: In jQuery versions...

CVE-2022-24812

creationtimestamp| type| source ---|---|--- 2026-06-30 10:51:46+00:00| seen| https://infosec.exchange/users/certvde/statuses/116838675578498232...

CNVD-2022-42853

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:09+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e019033-82b8-43dc-b006-b9dee0ddc0d8 2026-07-18 18:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/354 2026-07-19 00:00:10+00:00|...

agentopia (>=0.1.0 <=0.1.5), alaya-py (>=0.15.0.0 <=0.15.0.1) +219 more potentially affected by CVE-2022-37454 via pysha3 (>=0.3.0 <=1.0.2)

pysha3 PYPI version =0.3.0, =0.1.0, =0.15.0.0, =0.4.0a1, =0.1.0, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.5.2 - ape-frame =0.5.0a0 and more Source cves: CVE-2022-37454 Source advisory: OSV:PYSEC-2026-504...

PYSEC-2026-304 Server-Side Request Forgery in calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery SSRF. This is due to an incomplete fix for CVE-2022-0339. The blacklist does not check for 0.0.0.0, which would result in a payload of 0.0.0.0 resolving to localhost...