CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2012-1854link is external Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2020-9715link is external Adobe Acrobat...

corepack24-24.14.1-1.1 on GA media (moderate)

corepack24-24.14.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10504-1 Rating: moderate Cross-References: CVE-2026-21710 CVE-2026-21712 CVE-2026-21713 CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 CVE-2026-21717 CVSS scores: CVE-2026-21710 SUSE : 7.5...

OpenSSL -- Multiple vulnerabilities

The OpenSSL project reports: Seven vulnerabilities in OpenSSL library. Highest classification Moderate...

Security update for nodejs22 (important)

openSUSE security update: security update for nodejs22 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20236-1 Rating: important References: bsc1256569 bsc1256570 bsc1256571 bsc1256573 bsc1256574 bsc1256576 bsc1256848 Cross-References: CVE-2025-5513...

qt6-webengine -- multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 7 security bugs in Chromium: CVE-2025-13638: Prevent media element GC in callbacks in WebMediaPlayerMS CVE-2025-13639: Improve validation of SDP direction in remote description CVE-2025-13720: Avoid downcasting Hash and Integrity reports...

SUSE: Security Advisory (SUSE-SU-2026:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

corepack22-22.22.0-1.1 on GA media (moderate)

corepack22-22.22.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10074-1 Rating: moderate Cross-References: CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465 CVE-2025-59466 CVE-2026-21637 CVE-2026-22036 CVSS scores: CVE-2025-55130 SUSE : 8.1...

CLSA-2025-1766600619 kernel: Fix of 27 CVEs

xfrm: Duplicate SPI Handling CVE-2025-39965 - xfrm: state: use atomicincnotzero to increment refcount - padata: Fix pd UAF once and for all CVE-2025-38584 - padata: Remove broken queue flushing CVE-2023-52854 - padata: ensure padatadoserial runs on the correct CPU - Bluetooth: L2CAP: Fix...

Security update for grub2 (important)

openSUSE security update: security update for grub2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025:20163-1 Rating: important References: bsc1234959 bsc1245636 bsc1245738 bsc1245953 bsc1246231 bsc1247242 bsc1249088 bsc1249385 bsc1252930 bsc1252931...

Security update for MozillaThunderbird (important)

openSUSE security update: security update for mozillathunderbird ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20006-1 Rating: important References: bsc1249391 Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532...

PT-2025-46141

Name of the Vulnerable Software and Affected Versions Hyper Data Protector versions prior to 2.2.4.1 Description An SQL injection issue exists in Hyper Data Protector. Successful exploitation could allow remote attackers to execute unauthorized code or commands. Recommendations Update to Hyper Da...

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2010-3765link is external Mozilla Multiple Products Remote Code Execution Vulnerability CVE-2010-3962link is external Microsoft Internet Explorer Uninitialize...

chromedriver-140.0.7339.207-1.1 on GA media (moderate)

chromedriver-140.0.7339.207-1.1 on GA media Announcement ID: openSUSE-SU-2025:15578-1 Rating: moderate Cross-References: CVE-2025-10500 CVE-2025-10501 CVE-2025-10502 CVE-2025-10585 CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 Affected Products: openSUSE Tumbleweed An update that solves 7...

firefox-esr-140.2.0-1.1 on GA media (moderate)

firefox-esr-140.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15468-1 Rating: moderate Cross-References: CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184 CVE-2025-9185 CVSS scores: CVE-2025-9180 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N...

Mozilla Firefox ESR Security Update (mfsa_2025-67) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

CLSA-2025-1742806909 kernel: Fix of 37 CVEs

HID: core: zero-initialize the report buffer CVE-2024-50302 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - bus: mhi: host: Add alignment check for event ring read pointer CVE-2023-52494 - net: sched: fix ets qdisc OOB Indexing CVE-2025-21692 - parport: Proper fix for...

CVE-2020-1820

There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities...

CLSA-2023-1698101945 Fix of 7 CVEs

CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22044, CVE-2023-22045, CVE-2023-22049, CVE-2023-25193. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-July/024064.html...

CLSA-2023-1697744503 Fix of 7 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...

CLSA-2023-1697744372 Fix of 7 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...