37646 matches found
azure-storage-azcopy-10.32.2-1.1 on GA media (moderate)
azure-storage-azcopy-10.32.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10407-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...
CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...
The vulnerability of the lookup_rec() function in the kernel/trace/ftrace.c module, which supports Linux operating system tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the lookuprec function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cp2112xfer function in the drivers/hid/hid-cp2112.c driver of the Linux kernel’s input device subsystem relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
OPENSUSE-SU-2026:10426-1 python311-intake-2.0.9-1.1 on GA media
These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-23923
A flaw was found in Zabbix. An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. This could lead to a limited impact on the availability of the system, depending on the environment setup. Mitigation Mitigation for this issue is eithe...
CVE-2025-33215
CVE-2025-33215 affects NVIDIA SNAP-4 Container, specifically a vulnerability in the VIRTIO-BLK component. A malicious guest VM can trigger an out-of-range pointer offset by sending crafted messages, potentially causing a denial of service and impacting storage availability for other VMs. The NVID...
CVE-2026-32854
A flaw was found in LibVNCServer. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted HTTP requests. The flaw exists in the HTTP proxy handlers, where missing validation of certain return values can lead to a null pointer dereference, causing...
OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media
These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10415-1 glances-common-4.5.2-1.1 on GA media
These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260324-73-0028
A vulnerability in the vsock component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected information...
ROS-20260324-73-0011
A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of an uninitialized resource. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...
ROS-20260324-73-0021
A vulnerability in the bpf and ktls components of the Linux operating system kernel is related to the use of an uninitialized resource. Exploitation of the vulnerability allows an intruder to affect confidentiality and availability of protected information...
ROS-20260324-73-0017
A vulnerability in the discoveryinit function in the include/net/bluetooth/hcicore.h module of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...
OPENSUSE-SU-2026:10413-1 firefox-esr-140.9.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media
These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260324-73-0015
A vulnerability in the ipv6 component of the Linux operating system kernel is associated with the execution of a loop with an inaccessible exit condition. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...
ROS-20260324-73-0009
A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...
ROS-20260324-73-0010
A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...
