Unbreakable Enterprise kernel security update

5.15.0-310.184.5.2 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error Jeff Layton CVE-2025-38089 - netsched: schsfq: move the limit validation Octavian Purdila CVE-2025-37752 - netsched: schsfq: use a temporary work area for validating configuration Octavian Purdila - netsched:...

CVE-2025-36357

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-11-17 22:04:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ua6owij52q...

AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue

The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...

CVE-2024-36357

creationtimestamp| type| source ---|---|--- 2025-07-08 12:11:49+00:00| seen| https://seclists.org/oss-sec/2025/q3/11 2025-07-08 14:47:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lthk6aj2uf2k 2025-08-28 13:39:43+00:00| seen| https://seclists.org/oss-sec/2025/q3/141...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

Unbreakable Enterprise kernel security update

5.15.0-309.180.4.2 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2021-36357

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

CVE-2023-36357 affects TP-Link TL-WR940N (V2/V4/V6), TL-WR841N (V8/V10), and TL-WR941ND (V5) in the LocalManageControlRpm component. The issue is described as a DoS triggered by a crafted GET request, caused by errors in resource release. Impact is Denial of Service on affected devices; no broade...

CVE-2022-36357

creationtimestamp| type| source ---|---|--- 2022-11-18 02:18:01+00:00| seen| https://t.me/cibsecurity/53121...

CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

CVE-2022-36357

CVE-2022-36357 : An unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exists in the Webpsilon ULTIMATE TABLES WordPress plugin up to version 1.6.5. The issue stems from inadequate sanitization/escaping of parameters before output, enabling reflected XSS. Affected software: WordP...

CVE-2021-36357

creationtimestamp| type| source ---|---|--- 2021-10-22 16:39:21+00:00| seen| https://t.me/cibsecurity/31023...

CVE-2021-36357

The CVE-2021-36357 issue affects OpenPOWER 2.6 firmware. unpack_timestamp() uses le32_to_cpu() to endian-convert the uint16_t year, causing a type mismatch that can truncate the year value and bypass the timestamp check. The documented remediation is to apply the correct endian conversion functio...