44567 matches found
OPENSUSE-SU-2026:10383-1 cargo1.93-1.93.0-3.1 on GA media
These are all security issues fixed in the cargo1.93-1.93.0-3.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260317-73-0030
A vulnerability in the net/xfrm component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected information...
OPENSUSE-SU-2026:10385-1 traefik-3.6.10-2.1 on GA media
These are all security issues fixed in the traefik-3.6.10-2.1 package on the GA media of openSUSE Tumbleweed...
Huawei EMUI and Huawei HarmonyOS IMS Module Out-of-Bounds Write Vulnerability
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei EMUI and Huawei HarmonyOS IMS modules, which can be...
Huawei EMUI and Huawei HarmonyOS System Service Framework Privilege Bypass Vulnerability
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege bypass vulnerability exists in the Huawei EMUI and Huawei HarmonyOS system service framework, which c...
Schneider Electric EcoStruxure Automation Expert Code Injection Vulnerability
Schneider Electric EcoStruxure Automation Expert is a software platform for industrial automation systems from the French company Schneider Electric Schneider Electric. A code injection vulnerability exists in Schneider Electric EcoStruxure Automation Expert, which can be exploited by an attacker...
OPENSUSE-SU-2026:10381-1 python311-3.11.15-2.1 on GA media
These are all security issues fixed in the python311-3.11.15-2.1 package on the GA media of openSUSE Tumbleweed...
Adobe Commerce License Issues Vulnerability (CNVD-2026-15168)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that could be exploited by an attacker to bypass security measures and have a limited impact on...
Linux USB Device Driver Heap Buffer Overflow DoS
The vulnerability of the usbremovehcd function in the drivers/usb/core/hcd.c file of the Linux operating system’s USB device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
Linux kernel Lantiq XRX200 Buffer Overflow
The vulnerability of the xrx200allocbuf function in the drivers/net/ethernet/lantiqxrx200.c module of the Linux Ethernet network adapter driver is related to the unrestricted and unregulated distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the...
Linux kernel Network File System Buffer Overflow
The vulnerability of the netfspgpriv2begincopytocache function in the fs/netfs/readpgpriv2.c module of the Linux kernel’s network file system support module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...
ROS-20260317-73-0025
A vulnerability in the cryptmessage function in the fs/smb/client/smb2ops.c module of the SMB client support module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability...
ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media (moderate)
ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media Announcement ID: openSUSE-SU-2026:10356-1 Rating: moderate Cross-References: CVE-2013-2877 CVE-2014-0191 CVE-2015-1819 CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-7995 CVE-2015-8035...
ruby4.0-rubygem-rubyzip-2.3.2-1.19 on GA media (moderate)
ruby4.0-rubygem-rubyzip-2.3.2-1.19 on GA media Announcement ID: openSUSE-SU-2026:10363-1 Rating: moderate Cross-References: CVE-2017-5946 CVE-2018-1000544 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issue...
ruby4.0-rubygem-puma-6.4.3-1.5 on GA media (moderate)
ruby4.0-rubygem-puma-6.4.3-1.5 on GA media Announcement ID: openSUSE-SU-2026:10357-1 Rating: moderate Cross-References: CVE-2019-16770 CVE-2020-11076 CVE-2022-23634 CVE-2024-45614 CVSS scores: CVE-2019-16770 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-11076 SUSE : 6.8...
ROS-20260317-73-0031
A vulnerability in the cloneprivatemnt function of the Linux kernel is related to insecure privilege management. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation via the DataRow.Decode function. An attacker can cause a panic and potentially disrupt application availability by sending a DataRow message with a negative field length from a malicious or compromised PostgreS...
Moderate: Red Hat Security Advisory: Insights proxy Container Image
Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...
PT-2026-26315
Name of the Vulnerable Software and Affected Versions Grafana Tempo versions prior to 2.10.3 Description A flaw exists in Grafana Tempo that results in the exposure of the S3 SSE-C encryption key in plaintext. This exposure occurs through the /status/config API endpoint. Successful exploitation...