SUSE-SU-2026:20723-1 Security update for virtiofsd

This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257912...

CVE-2018-25159

creationtimestamp| type| source ---|---|--- 2026-03-12 09:40:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgu47cuqur2v...

CVE-2026-4010

creationtimestamp| type| source ---|---|--- 2026-03-12 07:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4010 2026-03-12 09:09:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgu2hxtogc2e...

CVE-2026-4013

creationtimestamp| type| source ---|---|--- 2026-03-12 07:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4013 2026-03-12 09:14:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgu2qwbuni2d...

CVE-2026-3982

creationtimestamp| type| source ---|---|--- 2026-03-12 04:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3982 2026-03-12 08:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgtyvwop6f2z...

GHSA-GQC5-XV7M-GCJQ

creationtimestamp| type| source ---|---|--- 2026-03-12 04:10:06+00:00| seen| https://gist.github.com/alon710/e3dc62168c67266174e7a28a55951177...

CVE-2026-3913

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 22:16:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgvggjhb7d2x 2026-03-16 00:00:00+00:00|...

yauzl contains an off-by-one error

yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...

CVE-2026-31873

creationtimestamp| type| source ---|---|--- 2026-03-12 00:10:42+00:00| published-proof-of-concept| https://github.com/unjs/unhead/security/advisories/GHSA-5339-hvwr-7582 2026-03-12 19:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv5ub6kvb2n...

GCVE-1-2026-0020

creationtimestamp| type| source ---|---|--- 2026-03-11 14:14:51+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/523ca818-9868-4f11-832b-baf2fbd9d76c...

CVE-2026-3496

CVE-2026-3496 – JetBooking for WordPress is an unauthenticated SQL Injection in the check_in_date parameter affecting all versions up to 4.0.3. The root cause is insufficient escaping of user input and lack of proper SQL query preparation, enabling attackers to append additional SQL to queries an...

CVE-2026-3496 JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter

The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'checkindate' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2020-36947

creationtimestamp| type| source ---|---|--- 2026-03-11 12:10:06+00:00| seen| https://gist.github.com/alon710/90d4653c1f3204acd98b3c7dd62773cd...

CVE-2026-32136

creationtimestamp| type| source ---|---|--- 2026-03-11 08:30:16+00:00| published-proof-of-concept| https://github.com/AdguardTeam/AdGuardHome/security/advisories/GHSA-5fg6-wrq4-w5gh 2026-03-12 00:01:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213261265217417 2026-03-12...

CVE-2026-3805

creationtimestamp| type| source ---|---|--- 2026-03-11 06:56:47+00:00| seen| https://mastodon.social/users/bagder/statuses/116209234981784209 2026-03-11 16:40:52+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116211531439936074 2026-03-12 08:02:07+00:00| seen|...

CVE-2026-3784

creationtimestamp| type| source ---|---|--- 2026-03-11 06:56:37+00:00| seen| https://mastodon.social/users/bagder/statuses/116209234272816653 2026-03-12 08:02:07+00:00| seen| https://bsky.app/profile/slackers.it/post/3mgtwpmo6wf2y 2026-03-12 08:02:08+00:00| seen|...

CVE-2025-54820

creationtimestamp| type| source ---|---|--- 2026-03-11 03:00:12+00:00| seen| https://fortiguard.fortinet.com/psirt/FG-IR-26-098 2026-03-11 08:19:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0086 2026-03-11 10:50:56+00:00| seen|...

PT-2026-24674

The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check in date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

GHSA-WG9X-QFGW-PXHJ

creationtimestamp| type| source ---|---|--- 2026-03-10 23:10:05+00:00| seen| https://gist.github.com/alon710/dc81c1a2b7f709c06e63d38f24ae7eeb...

GHSA-P9XR-7P9P-GPQX

creationtimestamp| type| source ---|---|--- 2026-03-10 22:40:05+00:00| seen| https://gist.github.com/alon710/b3f6f3a2d0a03d351cf9f1e0f3b1967e...