Linux Distros Unpatched Vulnerability : CVE-2021-20241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the...

Linux Distros Unpatched Vulnerability : CVE-2021-3567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Carib...

Linux Distros Unpatched Vulnerability : CVE-2025-46399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function. CVE-2025-46399 Note that Nessus...

ROS-20250827-09

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

Linux Distros Unpatched Vulnerability : CVE-2025-24031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a use...

Linux Distros Unpatched Vulnerability : CVE-2020-25651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate...

OPENSUSE-SU-2025:15496-1 python311-h2-4.3.0-1.1 on GA media

These are all security issues fixed in the python311-h2-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox JavaScript Engine Data Compromise

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Linux Distros Unpatched Vulnerability : CVE-2024-45598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in...

Linux Distros Unpatched Vulnerability : CVE-2020-27824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG's encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition...

Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product

SUMMARY Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the...

OPENSUSE-SU-2025:15494-1 libmozjs-128-0-128.14.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15492-1 fractal-12.0-3.1 on GA media

These are all security issues fixed in the fractal-12.0-3.1 package on the GA media of openSUSE Tumbleweed...

tpm-chip.c Heap Buffer Overflow DoS

Vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module – The driver for supporting alphanumeric devices with TPM cores in Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker ...

Linux snd_pcm_attach_substream Heap Buffer Overflow DoS

The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

cheat-4.4.2-2.1 on GA media (moderate)

cheat-4.4.2-2.1 on GA media Announcement ID: openSUSE-SU-2025:15488-1 Rating: moderate Cross-References: CVE-2023-48795 CVE-2025-21613 CVE-2025-21614 CVE-2025-22869 CVE-2025-22870 CVSS scores: CVE-2023-48795 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-21613 SUSE : 8.1...

ucode-intel-20250812-1.1 on GA media (moderate)

ucode-intel-20250812-1.1 on GA media Announcement ID: openSUSE-SU-2025:15492-1 Rating: moderate Cross-References: CVE-2025-20053 CVE-2025-20109 CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-26403 CVE-2025-32086 CVSS scores: CVE-2025-20053 SUSE : 7.2...

Bluetooth HCI Event Buffer Overflow

The vulnerability of the hcidisconnphylinkcompleteevt function in the net/bluetooth/hcievent.c module of the Bluetooth subsystem in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

tomcat10-10.1.44-1.1 on GA media (moderate)

tomcat10-10.1.44-1.1 on GA media Announcement ID: openSUSE-SU-2025:15490-1 Rating: moderate Cross-References: CVE-2025-48989 CVSS scores: CVE-2025-48989 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-48989 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

Linux Distros Unpatched Vulnerability : CVE-2021-20243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior...