SUSE-SU-2026:2222-1 Security update for hplip

This update for hplip fixes the following issues Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. - CVE-2026-8631: escalation of privileges and/or arbitrary code execution via ...

SUSE CVE-2026-44422

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without tracking the pointed object's expected NDR type or ownership. When the same ref-id is reused across two...

EUVD-2025-210027

Memory Corruption when sending random number generator command with insufficient output buffer size...

CVE-2026-24087

Memory corruption while processing fastboot OEM commands...

CVE-2025-59614

Memory Corruption when sending random number generator command with insufficient output buffer size...

CVE-2026-25258 Out-of-bounds Read in DSP Service

Memory corruption while processing IOCTL calls for escape operations...

CVE-2025-59614 Out-of-bounds Write in Windows Compute

Memory Corruption when sending random number generator command with insufficient output buffer size...

CVE-2025-59614 Out-of-bounds Write in Windows Compute

Memory Corruption when sending random number generator command with insufficient output buffer size...

CVE-2025-59614

Technical details for CVE-2025-59614 are not publicly available in the provided documents. Monitor for updates from NVD and Qualcomm security bulletins.

CVE-2025-59614

Memory Corruption when sending random number generator command with insufficient output buffer size...

EUVD-2026-33763

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The...

CVE-2026-10289 code-projects Hotel and Tourism Reservation System tour.php cross site scripting

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The...

CVE-2026-10265

creationtimestamp| type| source ---|---|--- 2026-06-01 17:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnall3qpsy2b...

ECHO-14E3-A93D-99BA

Bulletin has no description...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a buffer error vulnerability, which stems from insufficient output buffer size during the execution of random number generator commands, leading to memory corruption...

ASB-A-488928601

Bulletin has no description...

PT-2026-45637

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when sending a random number generator command if the output buffer size is insufficient. Recommendations At the moment, there is no...

ASB-A-497585114

Bulletin has no description...

CVE-2026-45631

creationtimestamp| type| source ---|---|--- 2026-05-29 20:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzg7ct3rx27 2026-05-30 03:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn22pkuqxu2r...

CVE-2026-49317

The CVE CVE-2026-49317 affects the Infotainment Digital Round on the Indian Scout Bobber + Tech 2025 model year. The vulnerability arises when the boot window relies on Wireless Control Module (WCM) traffic as a proxy for immobilizer presence. If no WCM messages are observed (e.g., by silencing W...