OPENSUSE-SU-2025:15783-1 postgresql14-14.20-1.1 on GA media

These are all security issues fixed in the postgresql14-14.20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15785-1 postgresql16-16.11-1.1 on GA media

These are all security issues fixed in the postgresql16-16.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-48298

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2025-48302

Name of the Vulnerable Software and Affected Versions office service affected versions not specified Description A denial of service DoS issue exists in the office service. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about ...

PT-2025-48300

Name of the Vulnerable Software and Affected Versions versions prior to 2025-58316 Description A denial-of-service condition exists in the video-related system service module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information abo...

PT-2025-48297

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58309: Undefined Security Weakness

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. An access to...

CVE-2025-59368

An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security...

AMD Xilinx Run Time Buffer Overflow Vulnerability

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. A buffer overflow vulnerability exists in AMD Xilinx Run Time, which can be exploited by an attacker to cause the reading or corrupti...

AMD Xilinx Run Time Elevation of Privilege Vulnerability

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. An elevation of privilege vulnerability exists in AMD Xilinx Run Time that stems from insufficient authentication and can be exploite...

OPENSUSE-SU-2025:15775-1 opa-1.11.0-1.1 on GA media

These are all security issues fixed in the opa-1.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

ASUS Router Stack Buffer Overflow Vulnerability

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. ASUS Router suffers from a stack buffer overflow vulnerability that originates from a boundary error when the application handl...

ASUS Router Integer Overflow Vulnerability

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. An integer underflow vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the availability of th...

AMD uProf Return Value Mishandling Vulnerability

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. A return value mishandling vulnerability exists in AMD uProf, which can be exploited by an attacker to cause a KSLR bypass and loss of...

Blog Site admin.php file improper authorization vulnerability

Blog Site is a blogging system. Blog Site suffers from an improper authorization vulnerability that originates in the file /admin.php, which can be exploited by an attacker to compromise confidentiality, integrity, and availability...

The vulnerability of FTP servers for managing Rumpus files, which stems from the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FTP server for managing Rumpus files is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of FTP servers for managing Rumpus files, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of FTP servers for managing Rumpus files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

JLSEC-2025-257 An integer overflow flaw was found in libtiff that exists in the `tif_getimage.c` file

An integer overflow flaw was found in libtiff that exists in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...