CVE-2026-33615 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

CVE-2026-33615

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

conftest-0.67.1-2.1 on GA media (moderate)

conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33747 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

python311-Pygments-2.20.0-2.1 on GA media (moderate)

python311-Pygments-2.20.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10476-1 Rating: moderate Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

PT-2026-29712

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

PT-2026-29807

Name of the Vulnerable Software and Affected Versions opensc affected versions not specified Description These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information about a newer version that...

python311-nltk-3.9.4-1.1 on GA media (moderate)

python311-nltk-3.9.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10461-1 Rating: moderate Cross-References: CVE-2026-33230 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:10478-1 python311-3.11.15-4.1 on GA media

These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10480-1 python313-3.13.12-3.1 on GA media

These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-67807

The CVE describes an authentication behavior issue in Sage DPW 2025_06_004 where login responses differ for valid vs. invalid usernames, enabling account enumeration on versions prior to 2021_06_000. Affected product: Sage DPW (on-premise deployments); root cause: discriminatory responses during ...

The vulnerability of the hci_cs_disconnect() function in the net/bluetooth/hci_event.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media

These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10479-1 python312-3.12.13-4.1 on GA media

These are all security issues fixed in the python312-3.12.13-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10475-1 opensc-0.27.1-1.1 on GA media

These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10473-1 dnsdist-2.0.3-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

Anritsu Remote Spectrum Monitor

RISK EVALUATION Successful exploitation of this vulnerability could allow attackers with network access to alter operational settings, obtain sensitive signal data, or disrupt device availability. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

OPENSUSE-SU-2026:10465-1 ImageMagick-7.1.2.18-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.18-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10468-1 python311-ecdsa-0.19.2-1.1 on GA media

These are all security issues fixed in the python311-ecdsa-0.19.2-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

incus-6.23-1.1 on GA media (moderate)

incus-6.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:10450-1 Rating: moderate Cross-References: CVE-2026-33542 CVE-2026-33711 CVE-2026-33743 CVE-2026-33897 CVE-2026-33898 CVE-2026-33945 CVSS scores: CVE-2026-33542 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N CVE-2026-33897 SUSE...