SUSE-SU-2026:3458-1 Security update for vim

This update for vim fixes the following issues: This update for vim fixes the following issues: Security issues fixed: - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary...

CVE-2026-12852

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12852...

CVE-2026-12802

creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12802...

CVE-2026-64135

creationtimestamp| type| source ---|---|--- 2026-08-03 08:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-63860

creationtimestamp| type| source ---|---|--- 2026-08-03 08:34:33+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

Exploit for CVE-2026-17583

cve-id Donate Support the maintenance of this project wit...

CVE-2026-7777

creationtimestamp| type| source ---|---|--- 2026-08-03 08:00:03+00:00| seen| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0 2026-08-04 00:00:44+00:00| published-proof-of-concept| Telegram/snqalfjRGyeCByylJf6ek8lwbWnhtUi9PGLk9MnmWsBvV0...

CVE-2026-45920

creationtimestamp| type| source ---|---|--- 2026-08-03 07:32:11+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-16564

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

CVE-2026-43480

creationtimestamp| type| source ---|---|--- 2026-08-03 07:15:36+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43453

creationtimestamp| type| source ---|---|--- 2026-08-03 07:12:30+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43432

creationtimestamp| type| source ---|---|--- 2026-08-03 07:10:33+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

DEBIAN-CVE-2026-6695

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA Paint Shop Pro Array image file. This vulnerability, a heap-based out-of-bounds write in the decodelzss function of the PAA file format plugin, allows data to be written beyond t...

CVE-2026-8763

creationtimestamp| type| source ---|---|--- 2026-08-03 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030049213840403 2026-08-03 06:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms5t2wluuw2j 2026-08-03 20:58:03+00:00| seen|...

CVE-2026-16563

Affected software & version: Academy LMS WordPress plugin, prior to 3.8.3. Vulnerability: REST API used to fetch a single lesson does not verify course enrollment or lesson publication status. Impact: Subscribers (self-service student level) can disclose content of arbitrary lessons, including pa...

com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-58059 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-58059 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518050...

br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2026-58059 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-58059 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518044...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2026-12860 Source advisory:...

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk16 is a Bouncy Castle Crypto package that is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.6. Affected versions of this package are vulnerable to Memory...