AZL-9358 CVE-2022-27382 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9179 CVE-2018-9057 for package terraform is not applicable

This CVE either no longer is or was never applicable...

AZL-9219 CVE-2019-1010238 for package pango is not applicable

This CVE either no longer is or was never applicable...

AZL-28619 CVE-2023-4273 for package hyperv-daemons is not applicable

This CVE either no longer is or was never applicable...

AZL-26947 CVE-2023-33199 for package skopeo is not applicable

This CVE either no longer is or was never applicable...

AZL-13703 CVE-2023-23920 for package nodejs is not applicable

This CVE either no longer is or was never applicable...

AZL-10315 CVE-2022-31144 for package redis is not applicable

This CVE either no longer is or was never applicable...

PT-2026-34236

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.0 Description A flaw exists in the run method of the CSV Agents class due to improper sandboxing when evaluating Python scripts generated by a Large Language Model LLM. An unauthenticated attacker can use prompt...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010794 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a warning like below 1: VFS: brelse: Trying...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007013)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007013 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specifi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011104 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: Fix potential resource leaks nfcgetdevice take reference for the device, add missing...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011321 advisory. In the Linux kernel, the following vulnerability has been resolved: devlink: report devlinkporttypewarn source device devlinkporttypewarn is scheduled for port devli...

Command Injection

Overview flowsint is an Add your description here Affected versions of this package are vulnerable to Command Injection via the orgtoasn transform process. An attacker can execute arbitrary operating system commands as root on the host machine by supplying shell metacharacters and escaping the...

CVE-2026-6570

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-40948

The Keycloak authentication manager in apache-airflow-providers-keycloak did not generate or validate the OAuth 2.0 state parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliver a crafted callback URL to a victim's...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload due to concatenating tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. An attacker can cause unintended files to be installed by supplying a specially crafted archi...

OPENSUSE-SU-2026:20569-1 Security update for rust1.94

This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher bsc1261876 Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwrapping varint decoding during parameters...

CVE-2026-6624

A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the file /?\route=pool/add of the component Pool List Interface. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has bee...

CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

EUVD-2026-23753

SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An attacker may login to the device without knowing the password by sending a crafted packet...