39097 matches found
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
OPENSUSE-SU-2026:10466-1 expat-2.7.5-1.1 on GA media
These are all security issues fixed in the expat-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed...
github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload
A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying...
The Wiz Blue Agent, now Generally Available
Accelerate your SecOps team with the Blue Agent for threat investigation, now Generally Available...
The vulnerability of the macb_get_addr() function in the drivers/net/ethernet/cadence/macb_main.c file of the Ethernet network adapter driver from Cadence’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the macbgetaddr function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet network adapter driver from Cadence’s Linux kernel lies in the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability of the ntfs_read_ea() function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ntfsreadea function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the hisi_uncore_target() function in the drivers/devfreq/hisi_uncore_freq.c module of the Linux dynamic frequency and voltage scaling driver software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hisiuncoretarget function in the drivers/devfreq/hisiuncorefreq.c module of the Linux dynamic frequency and voltage scaling driver relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...
The vulnerability of the miEnumattr() function in the fs/ntfs3/record.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the miEnumattr function in the fs/ntfs3/record.c module of the NTFS file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...
dovecot24-2.4.3-1.1 on GA media (moderate)
dovecot24-2.4.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10442-1 Rating: moderate Cross-References: CVE-2025-59028 CVE-2025-59031 CVE-2025-59032 CVE-2026-24031 CVE-2026-27855 CVE-2026-27856 CVE-2026-27857 CVE-2026-27858 CVE-2026-27859 CVE-2026-27860 CVSS scores: CVE-2025-59028 SUSE : 5.3...
OPENSUSE-SU-2026:10462-1 heroic-games-launcher-2.20.1-4.1 on GA media
These are all security issues fixed in the heroic-games-launcher-2.20.1-4.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the __gtp_encapdestroy() function in the drivers/net/gtp.c driver for network devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gtpencapdestroy function in the drivers/net/gtp.c driver for Linux kernel network devices is related to the use of memory after release. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
The vulnerability of the aie2_query_ctx_status_array() function in the drivers/accel/amdxdna/aie2_pci.c module of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the aie2queryctxstatusarray function in the drivers/accel/amdxdna/aie2pci.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `wavefront_send_sample()` function in the sound subsystem of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the wavefrontsendsample function in the sound subsystem of the Linux kernel lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
python311-oci-sdk-2.168.3-1.1 on GA media (moderate)
python311-oci-sdk-2.168.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10431-1 Rating: moderate Cross-References: CVE-2025-66418 CVSS scores: CVE-2025-66418 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-66418 SUSE : 6.9...
CVE-2026-30569
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...
OPENSUSE-SU-2026:10453-1 libpolkit-agent-1-0-127-3.1 on GA media
These are all security issues fixed in the libpolkit-agent-1-0-127-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10452-1 libjavamapscript-8.6.1-1.1 on GA media
These are all security issues fixed in the libjavamapscript-8.6.1-1.1 package on the GA media of openSUSE Tumbleweed...
rclone-1.73.3-1.1 on GA media (moderate)
rclone-1.73.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10419-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...