44025 matches found
OPENSUSE-SU-2026:11127-1 ImageMagick-7.1.2.25-3.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.25-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11132-1 jackson-databind-2.18.8-2.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.8-2.1 package on the GA media of openSUSE Tumbleweed...
nano-9.1-1.1 on GA media (moderate)
nano-9.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11120-1 Rating: moderate Cross-References: CVE-2026-40556 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the nano-9.1-1.1 package on...
OPENSUSE-SU-2026:11136-1 ocaml-4.14.4-1.1 on GA media
These are all security issues fixed in the ocaml-4.14.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11135-1 logback-1.5.36-1.1 on GA media
These are all security issues fixed in the logback-1.5.36-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21066-1 Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling bsc1268506. - CVE-2026-53538: urlencoded requests containing semicolons can lead to form field smuggling bsc1268496. -...
SUSE-SU-2026:22372-1 Security update for python-python-multipart
This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters can lead to file or parameter smuggling bsc1268506. - CVE-2026-53538: urlencoded requests containing semicolons can lead to form field smuggling bsc1268496. -...
CVE-2026-10804
A flaw was found in Streamlit, within its Palette Handler component. This vulnerability stems from the use of a weak hashing algorithm. A local attacker could exploit this flaw, though it requires a high level of technical complexity. Successful exploitation may lead to a low impact on the...
CVE-2026-48090: Use After Free
Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter envoy.filters.http.oauth2 can leave an in-flight async token exchange attached to a downstream stream that has already been torn down. A late...
trivy-0.71.2-1.1 on GA media (moderate)
trivy-0.71.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11102-1 Rating: moderate Cross-References: CVE-2026-47262 CVE-2026-50195 CVE-2026-53488 CVE-2026-53489 CVE-2026-53492 CVSS scores: CVE-2026-47262 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-50195 SUSE : 8.8...
CVE-2026-9717
CWE-78 Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts wi...
EUVD-2026-39434
CWE-78 Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts wi...
Linode Interfaces and Default Firewall Now Generally Available
...
EUVD-2026-39189
The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'postid' parameter in all versions up to, and including, 2.22.7 due to insufficient escaping on the user supplied parameter and lack of sufficie...
OPENSUSE-SU-2026:11125-1 tar-1.35-8.1 on GA media
These are all security issues fixed in the tar-1.35-8.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11118-1 jackson-databind-2.18.8-1.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.8-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework is related to access control errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
OPENSUSE-SU-2026:11116-1 dnsmasq-2.93-1.1 on GA media
These are all security issues fixed in the dnsmasq-2.93-1.1 package on the GA media of openSUSE Tumbleweed...