DoS (Denial of Service) io.netty:netty-codec-http Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

DoS (Denial of Service) io.netty:netty-codec Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:11416-1 gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11429-1 python315-3.15.0~b4-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-67222

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.9 Description An attacker can trigger a Denial of Service DoS by supplying specific expressions to the asteval.Interpreter.eval function. The issue occurs because the FROM PY list in asteval/astutils.py exposes...

OPENSUSE-SU-2026:11419-1 python313-GitPython-3.1.56-1.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11431-1 ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11424-1 python313-pydantic-2.13.4-2.1 on GA media

These are all security issues fixed in the python313-pydantic-2.13.4-2.1 package on the GA media of openSUSE Tumbleweed...

Chromium: CVE-2026-17882 Policy bypass in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

OPENSUSE-SU-2026:11412-1 evince-48.4-2.1 on GA media

These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11411-1 dnsdist-2.0.7-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

Linux dwc2_hsotg_udc_stop() Buffer Overflow

The vulnerability of the dwc2hsotgudcstop function in the drivers/usb/dwc2/gadget.c file of the Linux device driver framework relates to the unlocking of a locked resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-67256

Name of the Vulnerable Software and Affected Versions Perses versions 0.43.0 through 0.54.0-rc.0 Description Datasource creation and unsaved datasource proxy paths authorize callers on a Datasource or GlobalDatasource scope but fail to require read permissions for the associated project or global...

PT-2026-67257

Name of the Vulnerable Software and Affected Versions Perses versions prior to 0.54.0-rc.0 Description When using the file-system database, list endpoints bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

Linux kernel-based firmware th1520_aon_power_update() Data Compromise

The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the usbtmcrelease function in the drivers/usb/class/usbtmc.c module of the Linux device driver framework is related to the pointer being reclaimed after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel vt function Heap Buffer Overflow DoS

The vulnerability of the leavealt-screen function in the drivers/tty/vt/vt.c module of the Linux kernel virtual terminal driver framework is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

UCSI Interface Driver Heap Buffer Overflow DoS

The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...