SUSE-SU-2026:1520-1 Security update 5.1.3 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 Updated translation strings uyuni-tools: - Version 5.1.26-0 Fixed applying PTF with images from RPMs bsc1252548 Ssl Key...

CLSA-2026-1776761965 colord: Fix of CVE-2021-42523

CVE-2021-42523: fix memory leak in cddevicedbload and cdprofiledbload where sqlite3exec errormsg output was allocated but never freed...

CVE-2026-41316

creationtimestamp| type| source ---|---|--- 2026-04-21 07:48:52+00:00| published-proof-of-concept| https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv 2026-04-21 09:22:21+00:00| seen| https://bsky.app/profile/k0kubun.com/post/3mjynturvyk2i 2026-04-22 02:01:16+00:00| seen|...

Security Bulletin: IBM Storage Protect Operations Center is affected by vulnerabilities in the dojo-profile library that could allow prototype pollution or improper handling of crafted PNG inputs (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273).

Summary IBM Storage Protect Operations Center uses the dojo-profile library in certain components. Vulnerabilities in this library may allow prototype pollution or improper handling of specially crafted PNG files, which could lead to memory corruption or denial-of-service conditions in applicatio...

CVE-2026-6674

creationtimestamp| type| source ---|---|--- 2026-04-21 06:24:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjydw4ylkk2k 2026-04-28 06:01:11+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mkjvtqaiuw2s...

CVE-2026-41331

creationtimestamp| type| source ---|---|--- 2026-04-21 03:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxzb7bssv2k...

CVE-2026-41329

creationtimestamp| type| source ---|---|--- 2026-04-21 00:54:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxrigmuad2c 2026-04-21 01:19:10+00:00| published-proof-of-concept| Telegram/LrBuhuc7HcH3kswc1a1az3fvuC6rURNPubqOsu4a3yYkj38 2026-04-21 02:44:39+00:00| seen|...

CVE-2026-40098

creationtimestamp| type| source ---|---|--- 2026-04-21 00:04:02+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjxonkvqer2j...

Camaleon CMS 2.9.1 Automated Admin Login, Version Detection, and Profile Update Script

This is a version detection and profile updating script for Camaleon CMS. It does not exploit any issue but can be useful for security testing to see if a vulnerable version is in use...

PT-2026-34020

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the load customer info action in POST /conversation/ajax returns complete customer profile data to any authenticated user without verifying mailbox access. An attacker only needs a valid email address to...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010809 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: add handling for RAID1C23/DUP to btrfsreduceallocprofile Callers of btrfsreduceallocprofil...

Oracle PeopleSoft Enterprise HCM Human Resources 安全漏洞

Oracle PeopleSoft Enterprise HCM Human Resources is a human resources management system developed by Oracle Corporation. Version 9.2 of Oracle PeopleSoft Enterprise HCM Human Resources contains a security vulnerability. This vulnerability stems from issues with the Job Profile Manager component,...

PT-2026-34024

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

PT-2026-34104

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

blueprintUE self-hosted edition 安全漏洞

The blueprintUE self-hosted edition is an open-source data modeling and visualization tool developed by blueprintUE. Versions prior to blueprintUE self-hosted edition 4.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the password change form located at...

PT-2026-34194

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-29648

creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...

CVE-2026-6249

creationtimestamp| type| source ---|---|--- 2026-04-20 20:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcdboxxr2c 2026-04-20 21:22:19+00:00| published-proof-of-concept| Telegram/OLcxrKJ5zAhCDZ5T6GCelVBzr2kWns3QejwnSLKnpZyw...

CVE-2026-39109

creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2tnbmy2r...

CVE-2026-6248

creationtimestamp| type| source ---|---|--- 2026-04-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2ls3i62n 2026-04-20 21:22:08+00:00| seen| Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo...