44691 matches found
EulerOS Virtualization 2.10.0 : edk2 (EulerOS-SA-2026-1161)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an...
logback-1.2.13-2.1 on GA media (moderate)
logback-1.2.13-2.1 on GA media Announcement ID: openSUSE-SU-2026:10114-1 Rating: moderate Cross-References: CVE-2026-1225 CVSS scores: CVE-2026-1225 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
python314-3.14.2-2.1 on GA media (moderate)
python314-3.14.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10117-1 Rating: moderate Cross-References: CVE-2025-11468 CVSS scores: CVE-2025-11468 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-11468 SUSE : 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:...
OPENSUSE-SU-2026:10123-1 freerdp-3.21.0-2.1 on GA media
These are all security issues fixed in the freerdp-3.21.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10120-1 MozillaFirefox-147.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-147.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
Comodo Internet Security Premium File Name Handler Data Compromise
The vulnerability of the File Name Handler component in Comodo Internet Security Premium antivirus software exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...
OPENSUSE-SU-2026:10124-1 golang-github-prometheus-prometheus-3.9.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-3.9.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10127-1 rekor-1.5.0-1.1 on GA media
These are all security issues fixed in the rekor-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-15545
The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attack...
OPENSUSE-SU-2026:10113-1 icinga2-2.15.2-1.1 on GA media
These are all security issues fixed in the icinga2-2.15.2-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-13399: Insufficient Entropy
A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercepted traffic. Successful exploitation requires network proximity but no authentication, and may result in high impact to confidentiality,...
ROS-20260129-73-0079
A vulnerability in the SSH server of the library for the Go crypto programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...
OPENSUSE-SU-2026:10117-1 python314-3.14.2-2.1 on GA media
These are all security issues fixed in the python314-3.14.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10112-1 dirmngr-2.5.17-1.1 on GA media
These are all security issues fixed in the dirmngr-2.5.17-1.1 package on the GA media of openSUSE Tumbleweed...
DSP-service Qualcomm Data Compromise
The vulnerability of the DSP-service of microprogramming software in embedded chips from Qualcomm arises from incorrect validation of the array index. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
OPENSUSE-SU-2026:10116-1 python311-pypdf-6.6.2-1.1 on GA media
These are all security issues fixed in the python311-pypdf-6.6.2-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260129-73-0077
A vulnerability in the SSH server of the library for the Go crypto programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...
Qualcomm embedded software Data Compromise
The vulnerability of the camera driver in the microprogramming software for embedded chips from Qualcomm arises from the execution of operations beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...
ROS-20260129-73-0054
A vulnerability in the JIT compiler of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...