UBUNTU-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

CVE-2025-39711

CVE-2025-39711 affects the Linux kernel, specifically the media/ivsc code (ACE/CSI drivers). The vulnerability arises from missing mei_cldev_disable() calls in the remove() paths, causing mei_cl client objects to remain on mei_device->file_list after memory is freed by mei_cl_bus_dev_release()...

CVE-2025-41047 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/ace...

PT-2025-35918

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is triggered through the dataAddonlayouts and dataAddonlayouts except...

appRain CMF 跨站脚本漏洞

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...

KLA87209 ACE vulnerability in Microsoft Browser

Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-9478 Related products Microsoft-Edge CVE list CVE-2025-9478 critical Solution Install necessary updates from the Settings and more...

Linux Distros Unpatched Vulnerability : CVE-2021-27022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should...

Linux Distros Unpatched Vulnerability : CVE-2014-6311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

Malicious code in redux-ace (npm)

The package redux-ace was found to contain malicious code...

MAL-2025-13992 Malicious code in ace-one-widget-self-hosting (npm)

The package ace-one-widget-self-hosting was found to contain malicious code...

Malicious code in ace-one-widget-self-hosting (npm)

The package ace-one-widget-self-hosting was found to contain malicious code...

MAL-2025-31949 Malicious code in redux-ace (npm)

The package redux-ace was found to contain malicious code...

Malicious Package

Overview redux-ace is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)

None None...

Malicious code in ace-widgets (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6690 Malicious code in ace-widgets (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53534

creationtimestamp| type| source ---|---|--- 2025-08-04 08:08:50+00:00| published-proof-of-concept| https://github.com/acepanel/panel/security/advisories/GHSA-fm3m-jrgm-5ppg...

KLA85940 ACE vulnerability in Opera

ACE vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Opera 120 Related products Opera CVE list CVE-2025-6558 critical Solution Update to the latest version Download Opera Impacts ACE Arbitrary code execution...