Filter
AND

Teradata DatabaseCertain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, m…

First published (updated )

SUSE Linux Enterprise ServerLast updated 5 December 2024

First published (updated )

Red Hat Enterprise LinuxRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. T…

EPSS
0.04%
First published (updated )

SUSE Linux Enterprise ServerLast updated 18 February 2025

First published (updated )

openSUSEobs-service-go_modules: arbitrary directory delete

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Linux KernelNull Pointer Dereference

First published (updated )

Opensuse Supportutilssupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh

First published (updated )

SUSE Manager ServerSUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

First published (updated )

SUSE Manager ServerSUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload

First published (updated )

SUSE Manager ServerSUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

openSUSEpermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()

First published (updated )

Cannacanna: unsafe handling of /tmp/.iroha_unix directory

First published (updated )

SUSE Manager ServerSUMA user enumeration via weak error message

First published (updated )

SUSE RancherRancher: Weave CNI password is not set if RKE template is used with CNI value overridden

First published (updated )

SUSE RancherWrite access to the Catalog for any user when restricted-admin role is enabled

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GRUB 2grub2-once uses fixed file name in /var/tmp

First published (updated )

SUSE Rancher K3sK3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token

First published (updated )

SUSE CaaS Platformskuba: Insecure /tmp usage when joining node to cluster

First published (updated )

SUSE CaaS Platformskuba: Insecure handling of private key

First published (updated )

redhat/grub2GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/grub2GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

First published (updated )

redhat/grub2GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

First published (updated )

Opensuse Autoyast2Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

First published (updated )

openSUSE texlive-filesystemrace condition on texlive-filesystem cron job allows for the deletion of unintended files

First published (updated )

Fedoraproject FedoraInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/phpmyadmin/phpmyadminSQL Injection, XSS

First published (updated )

SUSE Linux Enterprise Servermysql-systemd-helper allows setting 640 permissions of arbitrary files

First published (updated )

Fedoraproject FedoraInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attac…

First published (updated )

FedoraIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote a…

First published (updated )

Fedoraproject FedoraInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacke…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203