44019 matches found
OPENSUSE-SU-2026:11246-1 libnfs-devel-6.0.2-1.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11253-1 wpa_supplicant-2.11-7.1 on GA media
These are all security issues fixed in the wpasupplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11245-1 GraphicsMagick-1.3.47-4.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11249-1 python313-weasyprint-69.0-1.1 on GA media
These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...
CVE-2026-33390
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
EUVD-2026-42536
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
CVE-2026-33803: Improper Restriction of Communication Channel to Intended Endpoints
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
OPENSUSE-SU-2026:11228-1 ImageMagick-7.1.2.27-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the cgi_addgroup_get_group_quota_minsize() function in the /cgi-bin/account_mgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cgiaddgroupgetgroupquotaminsize function in the /cgi-bin/accountmgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...
The vulnerability of the UPnP_AV_Server_Path_Setting function in D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the UPnPAVServerPathSetting function in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices is related to...
The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility o...
PT-2026-56729
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
OPENSUSE-SU-2026:11241-1 rclone-1.74.4-1.1 on GA media
These are all security issues fixed in the rclone-1.74.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57242
Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description The archive extract function allows the creation or overwriting of sibling objects within the same bucket or path scope. This occurs when extracting a specially crafted archive containing parent path...
CVE-2026-33390: Incorrect Privilege Assignment
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
OPENSUSE-SU-2026:11234-1 perl-DBI-1.650.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57234
Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description When using the -l/--links flag, the software serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target. This allows an attacker-controlle...