EulerOS Virtualization 2.10.0 : edk2 (EulerOS-SA-2026-1161)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an...

OPENSUSE-SU-2026:10120-1 MozillaFirefox-147.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-147.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10123-1 freerdp-3.21.0-2.1 on GA media

These are all security issues fixed in the freerdp-3.21.0-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the File Name Handler component in Comodo Internet Security Premium antivirus software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the File Name Handler component in Comodo Internet Security Premium antivirus software exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:10124-1 golang-github-prometheus-prometheus-3.9.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.9.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10127-1 rekor-1.5.0-1.1 on GA media

These are all security issues fixed in the rekor-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-15545

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attack...

CVE-2025-13399: Insufficient Entropy

A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercepted traffic. Successful exploitation requires network proximity but no authentication, and may result in high impact to confidentiality,...

OPENSUSE-SU-2026:10113-1 icinga2-2.15.2-1.1 on GA media

These are all security issues fixed in the icinga2-2.15.2-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260129-73-0079

A vulnerability in the SSH server of the library for the Go crypto programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

OPENSUSE-SU-2026:10117-1 python314-3.14.2-2.1 on GA media

These are all security issues fixed in the python314-3.14.2-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the camera driver in Qualcomm’s embedded software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the camera driver in the microprogramming software for embedded chips from Qualcomm arises from the execution of operations beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260129-73-0077

A vulnerability in the SSH server of the library for the Go crypto programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

The vulnerability of the DSP-service of microprogramming software in embedded chips from Qualcomm allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DSP-service of microprogramming software in embedded chips from Qualcomm arises from incorrect validation of the array index. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2026:10116-1 python311-pypdf-6.6.2-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10112-1 dirmngr-2.5.17-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.17-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260129-73-0054

A vulnerability in the JIT compiler of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...

OPENSUSE-SU-2026:10111-1 gio-branding-upstream-2.86.3-3.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.86.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10115-1 python311-djangorestframework-3.16.1-2.1 on GA media

These are all security issues fixed in the python311-djangorestframework-3.16.1-2.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2026-4857

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...