37582 matches found
Decidim - Admin user search allows SQL injection through similarity-based sorting
Description The admin organization user search uses the untrusted term value inside raw SQL ORDER BY expressions. Because the value is interpolated before Rails sanitization is applied, a crafted search string is executed by PostgreSQL as part of the sort expression. Impact - Exploitation require...
The vulnerability of the nfsd_set_fh_dentry() function in the fs/nfsd/nfsfh.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfsdsetfhdentry function in the fs/nfsd/nfsfh.c module, which supports the Network File System in Linux kernels, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
OPENSUSE-SU-2026:11256-1 busybox-1.38.0-1.1 on GA media
These are all security issues fixed in the busybox-1.38.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57833
These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11254-1 chromedriver-150.0.7871.114-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.114-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11252-1 wget-1.25.0-3.1 on GA media
These are all security issues fixed in the wget-1.25.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11251-1 traefik-3.7.7-1.1 on GA media
These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11250-1 qemu-11.0.2-1.1 on GA media
These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11249-1 python313-weasyprint-69.0-1.1 on GA media
These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11253-1 wpa_supplicant-2.11-7.1 on GA media
These are all security issues fixed in the wpasupplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11246-1 libnfs-devel-6.0.2-1.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11245-1 GraphicsMagick-1.3.47-4.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.47-4.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...
CVE-2026-33390
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
EUVD-2026-42536
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...
OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media
These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...
kernel-devel-7.1.3-1.1 on GA media (moderate)
kernel-devel-7.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11214-1 Rating: moderate Cross-References: CVE-2026-53359 CVE-2026-53362 CVSS scores: CVE-2026-53359 SUSE : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-53359 SUSE : 9.3...