CVE-2024-36320

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...

CVE-2024-36320

CVE-2024-36320 describes an integer overflow in the Windows/AMD graphics driver component atihdwt6.sys that can allow a local attacker to perform out-of-bounds reads/writes, leading to potential loss of confidentiality, integrity, and availability. Connected sources corroborate a local-privilege-...

RLSA-2026:1241 Important: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: urllib3: urllib3: Unbounded decompression chain leads to resource...

CVE-2026-23685

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

CVE-2026-23689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

CVE-2026-0485

SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server CMS to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, renderin...

CVE-2026-0505

The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the...

CVE-2026-0490

SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the legitimate users from accessing the platform. As a result, it has a high impact on the availability but no impact on th...

CVE-2026-0509

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required SRFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the...

OPENSUSE-SU-2026:10179-1 python311-maturin-1.11.5-1.1 on GA media

These are all security issues fixed in the python311-maturin-1.11.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10181-1 sccache-0.13.0~1-2.1 on GA media

These are all security issues fixed in the sccache-0.13.01-2.1 package on the GA media of openSUSE Tumbleweed...

Huawei EMUI and Huawei HarmonyOS DFX Module Out-of-Bounds Write Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei EMUI and Huawei HarmonyOS DFX module, which can be...

Oracle Linux 10 : pcs (ELSA-2026-2438)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2438 advisory. 0.12.1-1.el101.2 - Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1 Resolves: RHEL-144292 Tenable has extracted the preceding description block directly...

libp11-kit0-0.26.2-1.1 on GA media (moderate)

libp11-kit0-0.26.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10169-1 Rating: moderate Cross-References: CVE-2026-2100 CVSS scores: CVE-2026-2100 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-2100 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

libxml2-16-2.14.5-3.1 on GA media (moderate)

libxml2-16-2.14.5-3.1 on GA media Announcement ID: openSUSE-SU-2026:10167-1 Rating: moderate Cross-References: CVE-2025-10911 CVE-2026-1757 CVSS scores: CVE-2025-10911 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-10911 SUSE : 6.8...

openQA-5.1770718745.ce2072d3-1.1 on GA media (moderate)

openQA-5.1770718745.ce2072d3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10168-1 Rating: moderate Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25547 SUSE : 8.7...

PT-2026-7589

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...

Huawei HarmonyOS Media Subsystem Out-of-Bounds Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS media subsystem, which can be exploited by attackers to cause confidentiality and...

OPENSUSE-SU-2026:10182-1 snpguest-0.10.0-2.1 on GA media

These are all security issues fixed in the snpguest-0.10.0-2.1 package on the GA media of openSUSE Tumbleweed...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...