GHSA-9M5J-4XX9-44J9 vulnerabilities

Vulnerabilities for packages: py3-pulp...

DagorEngine security vulnerabilities

DagorEngine is a game development engine and tool open-sourced by Gaijin Entertainment. Versions of DagorEngine dated before dagor20250115 contained security vulnerabilities. These vulnerabilities were caused by improper memory buffer operations in the miniupnpc component upnpreplyparse.C, which...

weixin4j security vulnerabilities

Weixin4j is a WeChat development toolkit personally developed by Jinyu. Weixin4j has security vulnerabilities, which stem from improper control over sequential memory allocation in the program files CharArrayBuffer.Java and ClassUtil.Java...

Wicked Engine security vulnerabilities

Wicked Engine is a 3D graphics engine developed by Turánszki János individually. Versions of Wicked Engine prior to 0.71.705 contained security vulnerabilities, which were caused by an out-of-bound read operation in the program file ldebug.C...

::Engine security vulnerabilities

is::Engine is a game engine developed by Is Daouda personally. Versions of is::Engine prior to 3.3.4 contained security vulnerabilities, which stemmed from the issue of memory being retained after the effective lifetime of objects had ended...

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2026-0932)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0932 advisory. 1.8.0.482.b08-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.482.b08-1 - Update to 8u482-b08 GA. - Update release notes for 8u482-b08. -...

swoole-src security vulnerabilities

swoole-src is an open-source PHP concurrency library based on coroutines, developed by the Swoole Project. Versions of swoole-src prior to 6.0.2 contained security vulnerabilities, which were caused by integer overflows or circular errors in the sds.C file...

UEVR security vulnerabilities

UEVR is a general-purpose VR engine module developed by PrayDog’s individual developer. Versions of UEVR prior to 1.05 contained security vulnerabilities, which were caused by out-of-bound writes in the program files ldebug.C and lvm.C...

Dell CloudBoost Virtual Appliance security vulnerabilities

Dell CloudBoost Virtual Appliance is a storage solution software developed by the American company Dell. Versions of Dell CloudBoost Virtual Appliance prior to 19.14.0.0 contained security vulnerabilities. These vulnerabilities stemmed from the storage of plaintext passwords, which could lead to...

Lua Player Plus Vita security vulnerability

Lua Player Plus Vita is a script interpreter developed by Alessio Tosto as an individual project. Prior versions of Lua Player Plus Vita R6 had security vulnerabilities, which stemmed from out-of-bounds read operations...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_60-default / etc (SUSE-SU-2026:0283-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0283-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: -...

IX-Ray Engine security vulnerabilities

IX-Ray Engine is a modern game engine open-source by the IX-Ray Team. Versions of IX-Ray Engine prior to 1.3 contained security vulnerabilities, which were caused by exposing sensitive information to unauthorized participants...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:0284-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0284-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: -...

RawTherapee security vulnerabilities

RawTherapee is an open-source photo processing program developed by RawTherapee. Versions of RawTherapee 5.11 and earlier contained security vulnerabilities. These vulnerabilities were caused by integer overflows or circular errors in the image processing engine component dcraw.Cc, which could le...

java-21-openjdk-21.0.10.0-1.1 on GA media (moderate)

java-21-openjdk-21.0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10093-1 Rating: moderate Cross-References: CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945 CVSS scores: CVE-2026-21925 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-21932 SUSE : 7.4...

TP-Link Tapo C220 and TP-Link Tapo C520WS have security vulnerabilities

Both the TP-Link Tapo C220 and TP-Link Tapo C520WS are WiFi cameras produced by the Chinese company TP-Link. The TP-Link Tapo C220 v1 and TP-Link Tapo C520WS v2 have security vulnerabilities. These vulnerabilities stem from the fact that firmware updates terminate core services without verifying...

IX-Ray Engine security vulnerabilities

IX-Ray Engine is a modern game engine open-source by the IX-Ray Team. Versions of IX-Ray Engine prior to 1.3 contained security vulnerabilities, which were caused by out-of-bounds write-ups...

IX-Ray Engine security vulnerabilities

IX-Ray Engine is a modern game engine open-source by the IX-Ray Team. Versions of IX-Ray Engine prior to 1.3 contained security vulnerabilities, which were caused by infinite loops with no exit conditions...

MGASA-2026-0018 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.120 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Important: Red Hat Security Advisory: python3.12-urllib3 security update

An update for python3.12-urllib3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...