The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain. Rated medium severity (CVSS 4.4). Public exploit code available and no vendor patch available.
Information Disclosure
Opensuse
NVD
CVSS 2.0
4.4
EPSS
0.1%
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs),. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Denial Of Service
Apache
Java
Santuario Xml Security For Java
NVD
CVSS 2.0
4.3
EPSS
8.4%