apache2-mod_security2-2.9.12-1.1 on GA media (moderate)

apache2-modsecurity2-2.9.12-1.1 on GA media Announcement ID: openSUSE-SU-2025:15457-1 Rating: moderate Cross-References: CVE-2025-54571 CVSS scores: CVE-2025-54571 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-54571 SUSE : 6.9...

Linux Distros Unpatched Vulnerability : CVE-2021-32027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values,...

Linux Distros Unpatched Vulnerability : CVE-2021-3480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker...

OPENSUSE-SU-2025:15464-1 nova-3.11.8-1.1 on GA media

These are all security issues fixed in the nova-3.11.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-33709

Name of the Vulnerable Software and Affected Versions: Real Spaces - WordPress Properties Directory Theme versions prior to 3.7 Description: The Real Spaces - WordPress Properties Directory Theme for WordPress is susceptible to privilege escalation through the imic agent register function. This...

glibc-2.42-1.1 on GA media (moderate)

glibc-2.42-1.1 on GA media Announcement ID: openSUSE-SU-2025:15460-1 Rating: moderate Cross-References: CVE-2025-8058 CVSS scores: CVE-2025-8058 SUSE : 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H CVE-2025-8058 SUSE : 5.9 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H Affecte...

Linux Distros Unpatched Vulnerability : CVE-2018-6125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information v...

Security update for the Linux Kernel

This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE update use the SUSE...

Huawei HarmonyOS multimodalinput module unintended injection event vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An unintended injection event vulnerability exists in the Huawei HarmonyOS multimodalinput module, which can be exploited by an attacker to cause availabilit...

Huawei HarmonyOS and EMUI Buffer Overflow Vulnerability (CNVD-2025-22611)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A buffer overflow vulnerability exists in Huawei HarmonyO...

Huawei HarmonyOS lock screen module state verification vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stateful validation vulnerability exists in the Huawei HarmonyOS lock screen module, which can be exploited by an attacker to compromise confidentiality an...

Huawei HarmonyOS and EMUI Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A buffer overflow vulnerability exists in Huawei HarmonyO...

Linux Distros Unpatched Vulnerability : CVE-2015-4767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

Linux Distros Unpatched Vulnerability : CVE-2015-4833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

Linux Distros Unpatched Vulnerability : CVE-2015-2611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML...

Linux Distros Unpatched Vulnerability : CVE-2020-27842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a...

Linux Distros Unpatched Vulnerability : CVE-2016-3459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote...

Linux Distros Unpatched Vulnerability : CVE-2016-3614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related...

OPENSUSE-SU-2025:15458-1 cflow-1.8-2.1 on GA media

These are all security issues fixed in the cflow-1.8-2.1 package on the GA media of openSUSE Tumbleweed...

Huawei HarmonyOS heap buffer overflow vulnerability (CNVD-2025-22264)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause an availability impact...