CVE-2026-40567

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can inject arbitrary HTML into outgoing emails generated by FreeScout by sending an email with a crafted From display name. The name is stored in the database without sanitization a...

CVE-2026-40567

FreeScout (self-hosted help desk) contains an HTML injection vulnerability in outgoing emails prior to v1.8.213. An unauthenticated attacker can craft the From display name in an email; the name is stored in the database without sanitization and rendered unescaped in outgoing replies via the {%cu...

Sudo vulnerability affects Endress+Hauser MCS200HW

The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability...

OPENSUSE-SU-2026:20591-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: out-of-bounds write of a zero byte in the X11 display interaction path can lead to a crash bsc1260874...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011233 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011177 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null-deref in dmresume Why Fixing smatch error: dmresume error: we...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011167 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's...

FreeScout 安全漏洞

FreeScout is a lightweight and powerful free open-source help desk and shared inbox built using PHP Laravel framework by FreeScout Inc. Versions of FreeScout prior to 1.8.213 contained security vulnerabilities. These vulnerabilities stemmed from uncleanly storing the From display name in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010894 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010893 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: amd: display: Fix memory leakage This commit fixes memory leakage in dcconstructctx function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013227 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPIALLOCATEZEROED in acpidbdisplayobjects ACPICA commit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013077 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's...

PT-2026-34011

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can inject arbitrary HTML into outgoing emails generated by FreeScout by sending an email with a crafted From display name. The name is stored in the database without sanitization a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010816 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006984 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: amd: display: Fix memory leakage This commit fixes memory leakage in dcconstructctx function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013183)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013183 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null-deref in dmresume Why Fixing smatch error: dmresume error: we...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011095 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix igbdown hung on surprise removal In a setup where a Thunderbolt hub connects to Ethernet...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction bsc1260874. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

SUSE-SU-2026:1504-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction bsc1260874...

PT-2026-33777

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description A Server-Side Request Forgery SSRF issue exists in the Glances IP plugin due to improper validation of the public api configuration parameter. The value of public api is passed directly to the urlope...