OPENSUSE-SU-2025:15480-1 keylime-ima-policy-0.2.8+12-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.8+12-1.1 package on the GA media of openSUSE Tumbleweed...

WeGIA security vulnerabilities

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.4.10, which stems from an SQL injection in the idfuncionario parameter in the /html/funcionario/dependenteremover.php endpoint, which could lea...

Linux Distros Unpatched Vulnerability : CVE-2016-0665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security:...

wicked2nm-1.2.1-1.1 on GA media (moderate)

wicked2nm-1.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15471-1 Rating: moderate Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-55159 SUSE : 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

boa HTTP Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

TOTOLINK T6 Mesh System TCPcheck_net() MQTT Packet Handler Buffer Overflow

The vulnerability of the tcpchecknet function /router/meshSlaveDlfw in the MQTT Packet Handler component of the TOTOLINK T6 mesh-system software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Linux Distros Unpatched Vulnerability : CVE-2022-26498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much...

nova-3.11.8-1.1 on GA media (moderate)

nova-3.11.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15465-1 Rating: moderate Cross-References: CVE-2025-47907 CVSS scores: CVE-2025-47907 SUSE : 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-47907 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

pluto-5.22.5-1.1 on GA media (moderate)

pluto-5.22.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15466-1 Rating: moderate Cross-References: CVE-2025-47907 CVSS scores: CVE-2025-47907 SUSE : 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-47907 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

TOTOLINK A800R downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Liferay Portal and Liferay DXP have cross-site scripting vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Linux Distros Unpatched Vulnerability : CVE-2020-25690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

TOTOLINK A810R downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Distros Unpatched Vulnerability : CVE-2016-0605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors. CVE-2016-0605 Note th...

OPENSUSE-SU-2025:15466-1 polaris-10.1.1-1.1 on GA media

These are all security issues fixed in the polaris-10.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

cairo-devel-1.18.4-3.1 on GA media (moderate)

cairo-devel-1.18.4-3.1 on GA media Announcement ID: openSUSE-SU-2025:15458-1 Rating: moderate Cross-References: CVE-2025-50422 CVSS scores: CVE-2025-50422 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

Linux Distros Unpatched Vulnerability : CVE-2021-3480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker...

Linux Distros Unpatched Vulnerability : CVE-2021-32027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values,...

Linux Distros Unpatched Vulnerability : CVE-2016-0610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect...

openbao-2.3.2-1.1 on GA media (moderate)

openbao-2.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15461-1 Rating: moderate Cross-References: CVE-2025-54996 CVE-2025-55000 CVE-2025-55003 CVE-2025-5999 CVE-2025-6000 CVE-2025-6004 CVE-2025-6010 CVE-2025-6011 CVE-2025-6013 CVE-2025-6014 CVE-2025-6015 CVSS scores: CVE-2025-6000 SUSE :...