OPENSUSE-SU-2026:11325-1 agama-web-ui-23+0.f26ed5eab-49.1 on GA media

These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260722-73-0019

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

ROS-20260722-73-0017

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

ROS-20260722-73-0015

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

CVE-2025-50327

An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism...

EUVD-2025-210501

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

PT-2026-63526

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

CVE-2025-50325

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip...

CVE-2025-50325

CVE-2025-50325 relates to Bandizip v7.37 and is described as an Authentication Bypass vulnerability that allows remote attackers to bypass the Mark-of-the-Web protection on affected installations. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N with a base score of 5.4 (Medium...

PT-2026-63491

Name of the Vulnerable Software and Affected Versions Franco Corbelli ZPAQFRANZ versions prior to 61.4 Description A flaw allows a remote attacker to escalate privileges and execute arbitrary code by bypassing the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature used by...

The vulnerability of the webService() method in the Calculation/Web/Service.php PHP library allows a attacker to perform an SSRF attack.

The vulnerability of the webService method in the Calculation/Web/Service.php PHP library of the PhpSpreadsheet framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

ROS-20260722-73-0018

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created HTML page...

ROS-20260722-73-0009

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

PT-2026-64050

These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-16317

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yw4265r2a 2026-07-22 13:13:59+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mrafotbn332r...

CVE-2026-60254

creationtimestamp| type| source ---|---|--- 2026-07-21 23:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgiapqi2k 2026-07-23 16:49:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 19:37:07+00:00| seen|...

CVE-2026-60244

creationtimestamp| type| source ---|---|--- 2026-07-21 23:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy5huul2r 2026-07-23 16:49:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 21:37:06+00:00| seen|...

CVE-2026-16413

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16486 SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument day results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be...