OPENSUSE-SU-2025:15482-1 jetty-annotations-9.4.58-1.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-1.1 package on the GA media of openSUSE Tumbleweed...

flake-pilot-3.1.21-1.1 on GA media (moderate)

flake-pilot-3.1.21-1.1 on GA media Announcement ID: openSUSE-SU-2025:15476-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8...

Linux Distros Unpatched Vulnerability : CVE-2016-0668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local use...

OPENSUSE-SU-2025:15473-1 abseil-cpp-devel-20250814.0-2.1 on GA media

These are all security issues fixed in the abseil-cpp-devel-20250814.0-2.1 package on the GA media of openSUSE Tumbleweed...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.4.10, which stems from an SQL injection in the idfuncionario parameter in the /html/funcionario/dependenteremover.php endpoint, which could lea...

firefox-esr-140.2.0-1.1 on GA media (moderate)

firefox-esr-140.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15468-1 Rating: moderate Cross-References: CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184 CVE-2025-9185 CVSS scores: CVE-2025-9180 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N...

OPENSUSE-SU-2025:15472-1 MozillaThunderbird-140.2.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15475-1 flake-pilot-3.1.21-1.1 on GA media

These are all security issues fixed in the flake-pilot-3.1.21-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2016-0665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security:...

wicked2nm-1.2.1-1.1 on GA media (moderate)

wicked2nm-1.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15471-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media Announcement ID: openSUSE-SU-2025:15470-1 Rating: moderate Cross-References: CVE-2023-26154 CVE-2025-44001 CVE-2025-44004 CVE-2025-48731 CVE-2025-49221 CVE-2025-50946 CVE-2025-52931 CVE-2025-53514 CVE-2025-53857 CVE-2025-53910 CVE-2025-54458...

OPENSUSE-SU-2025:15480-1 keylime-ima-policy-0.2.8+12-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.8+12-1.1 package on the GA media of openSUSE Tumbleweed...

TOTOLINK A800R downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Linux Distros Unpatched Vulnerability : CVE-2020-25690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

boa HTTP Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

TOTOLINK A810R downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Distros Unpatched Vulnerability : CVE-2022-26498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much...

TOTOLINK T6 Mesh System TCPcheck_net() MQTT Packet Handler Buffer Overflow

The vulnerability of the tcpchecknet function /router/meshSlaveDlfw in the MQTT Packet Handler component of the TOTOLINK T6 mesh-system software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

pluto-5.22.5-1.1 on GA media (moderate)

pluto-5.22.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15466-1 Rating: moderate Cross-References: CVE-2025-47907 CVSS scores: CVE-2025-47907 SUSE : 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-47907 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...