Schneider Electric EcoStruxure Automation Expert Code Injection Vulnerability

Schneider Electric EcoStruxure Automation Expert is a software platform for industrial automation systems from the French company Schneider Electric Schneider Electric. A code injection vulnerability exists in Schneider Electric EcoStruxure Automation Expert, which can be exploited by an attacker...

OPENSUSE-SU-2026:10383-1 cargo1.93-1.93.0-3.1 on GA media

These are all security issues fixed in the cargo1.93-1.93.0-3.1 package on the GA media of openSUSE Tumbleweed...

Huawei EMUI and Huawei HarmonyOS IMS Module Out-of-Bounds Write Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei EMUI and Huawei HarmonyOS IMS modules, which can be...

ROS-20260317-73-0031

A vulnerability in the cloneprivatemnt function of the Linux kernel is related to insecure privilege management. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...

OPENSUSE-SU-2026:10381-1 python311-3.11.15-2.1 on GA media

These are all security issues fixed in the python311-3.11.15-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10384-1 cargo1.94-1.94.0-2.1 on GA media

These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the DataRow.Decode function. An attacker can cause a panic and potentially disrupt application availability by sending a DataRow message with a negative field length from a malicious or compromised PostgreS...

Moderate: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

PT-2026-26315

Name of the Vulnerable Software and Affected Versions Grafana Tempo versions prior to 2.10.3 Description A flaw exists in Grafana Tempo that results in the exposure of the S3 SSE-C encryption key in plaintext. This exposure occurs through the /status/config API endpoint. Successful exploitation...

The vulnerabilities of the functions aq_nic_service_timer_cb() and aq_nic_get_stats() in the driver drivers/net/ethernet/aquantia/atlantic/aq_nic.c of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions aqnicservicetimercb and aqnicgetstats in the driver/net/ethernet/aquantia/atlantic/aqnic.c file of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system are related to unvalidated array indexing. Exploiting these...

OPENSUSE-SU-2026:10377-1 python312-3.12.13-2.1 on GA media

These are all security issues fixed in the python312-3.12.13-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the shutdown_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the shutdowninterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the io_init_req() function in the io_uring/io_uring.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinitreq function in the iouring/iouring.c module of the Linux kernel’s asynchronous input/output interface is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:10376-1 chromedriver-146.0.7680.80-1.1 on GA media

These are all security issues fixed in the chromedriver-146.0.7680.80-1.1 package on the GA media of openSUSE Tumbleweed...

ruby4.0-rubygem-grpc-1.70.1-1.7 on GA media (moderate)

ruby4.0-rubygem-grpc-1.70.1-1.7 on GA media Announcement ID: openSUSE-SU-2026:10348-1 Rating: moderate Cross-References: CVE-2023-0286 CVSS scores: CVE-2023-0286 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media (moderate)

ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10344-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed...

Advisory ROSA-SA-2026-3207

software: libxslt 1.1.43 OS: ROSA-CHROME unaffected versions = libxslt-1.1.43-1 affected versions libxslt-1.1.43-1 CVE-ID: CVE-2024-55549 BDU-ID: 2025-03641 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xsltGetInheritedNsList function of the libxslt library is related to memory usage after it...

[SECURITY] Fedora 42 Update: pcs-0.12.2-1.fc42

pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd...

[SECURITY] Fedora 43 Update: pcs-0.12.2-1.fc43

pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd...

[SECURITY] Fedora 44 Update: pcs-0.12.2-1.fc44

pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd...