34019 matches found
kubevirt1.8-container-disk-1.8.4-1.1 on GA media (moderate)
kubevirt1.8-container-disk-1.8.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11307-1 Rating: moderate Cross-References: CVE-2026-35469 CVSS scores: CVE-2026-35469 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-35469 SUSE : 7.1...
containerized-data-importer1.65-api-1.65.0-2.1 on GA media (moderate)
containerized-data-importer1.65-api-1.65.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11305-1 Rating: moderate Cross-References: CVE-2025-22870 CVE-2025-22872 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-33186 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827...
PT-2026-61084
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ov8856 init controls function within the i2c media component. The issue arises because the control handler is not properly freed when the process of adding...
PT-2026-61660
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.128 Description A use after free issue in the Network component allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. Use after free is a memory corruption flaw...
system-user-zabbix-7.0.28-1.1 on GA media (moderate)
system-user-zabbix-7.0.28-1.1 on GA media Announcement ID: openSUSE-SU-2026:11304-1 Rating: moderate Cross-References: CVE-2026-25680 CVE-2026-42502 CVSS scores: CVE-2026-25680 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25680 SUSE : 8.7...
OPENSUSE-SU-2026:11309-1 chromedriver-150.0.7871.128-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.128-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11306-1 kbfs-6.6.3-3.1 on GA media
These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed...
Fedora 43 : chromium (2026-32e3e23696)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32e3e23696 advisory. Update to 150.0.7871.124 CVE-2026-15764: Use after free in Ozone CVE-2026-15765: Use after free in Ozone CVE-2026-15766: Uninitialized Use in Skia...
gomuks-26.03+git.1780250926.564a8707-1.1 on GA media (moderate)
gomuks-26.03+git.1780250926.564a8707-1.1 on GA media Announcement ID: openSUSE-SU-2026:11290-1 Rating: moderate Cross-References: CVE-2026-25681 CVE-2026-27136 CVE-2026-33809 CVE-2026-39821 CVE-2026-42502 CVE-2026-42506 CVSS scores: CVE-2026-25681 SUSE : 6.1...
PT-2026-61511
Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...
oras-1.3.3-2.1 on GA media (moderate)
oras-1.3.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11297-1 Rating: moderate Cross-References: CVE-2026-50163 CVSS scores: CVE-2026-50163 SUSE : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
CVE-2026-49284
creationtimestamp| type| source ---|---|--- 2026-07-17 19:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujisgyt52s...
CVE-2026-48015 Shopware: Stored XSS via SVG file upload — no SVG sanitization
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowedextensions whitelist in src/Core/Framework/Resources/config/packages/shopware.yaml and can be uploaded via the media manager without SVG content sanitization in the upload pipeline from...
CVE-2026-48015
Shopware core is affected by CVE-2026-48015 due to SVG files being allowed in the media upload whitelist and not sanitized in the upload pipeline (MediaUploadController → FileSaver → TypeDetector). Prior to versions 6.6.10.18 and 6.7.10.1, uploading SVGs could allow embedded JavaScript (onload, [...
CVE-2026-48015 Shopware: Stored XSS via SVG file upload — no SVG sanitization
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowedextensions whitelist in src/Core/Framework/Resources/config/packages/shopware.yaml and can be uploaded via the media manager without SVG content sanitization in the upload pipeline from...
CVE-2026-60024
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...
CVE-2026-60024 Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...
CVE-2026-60024
The CVE-2026-60024 entry concerns the Joomla extension Events Booking prior to version 5.8.0, where a default insecure configuration allowed unauthenticated users to upload media assets. Attack context is not further detailed in the supplied documents, but CVSS 3.1 reflects a high impact on confi...
CVE-2026-60024
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...
