Linux kernel Heap Buffer Overflow DoS

The vulnerability of the igbsetuprxresources function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

MongoDB Permission Access DoS

The vulnerability of the MongoDB database management system is related to the incorrect assignment of permissions for the critical resource. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990629 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: Fix a possible resource leak in icomprobe When pcireadconfigdword failed, call...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the dotask function in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Dahua micro-programmed IP cameras Permission Bypass

The vulnerability of Dahua’s micro-programmed IP cameras is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information through a specially crafted HTTP request...

CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989199 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: core: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989321 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: denali: Use managed device resources All of the resources used by this driver has...

WordPress Consulting Elementor Widgets plugin file inclusion vulnerability

WordPress Consulting Elementor Widgets plugin is a plugin for the Elementor page builder that allows users to add and customize website content with drag and drop functionality. A file inclusion vulnerability exists in the WordPress Consulting Elementor Widgets plugin, which stems from not...

Dell Secure Connect Gateway Relative Path Traversal Vulnerability

Dell Secure Connect Gateway is an enterprise-grade secure connectivity gateway appliance from Dell that is used to monitor hardware status, automate the creation of support requests, and securely communicate to safeguard device connectivity to Dell backend services. A relative path traversal...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989480 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989447 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988832 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2domountfs If jffs2buildfilesystem in jffs2domountfs returns an...

Linux kernel Ethernet adapter DoS

The vulnerability of the hns3clientinit function in the drivers/net/ethernet/hisilicon/hns3/hns3enet.c file of the Linux Ethernet network adapter support driver relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Kernel UDP Buffer Overflow DoS

The vulnerability of the udpDestroySock function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the sevmappercpudata function in the arch/x86/kernel/kvm.c module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989697 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: denali: Use managed device resources All of the resources used by this driver has...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989522 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 net: dsa:...