Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993196 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'addwidgetnode' As 'kobjectadd' may allocated memory for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992915 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatportadd In atatportadd, the return value of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993246 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/drv: Fix potential memory leak in drmdevinit drmdevinit will add drmdevinitrelease as a...

Linux Distros Unpatched Vulnerability : CVE-2022-50846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: via-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that...

CVE-2025-62149: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Stored XSS.This issue affects Add Custom Codes: from n/a through = 4.80...

CVE-2025-62119: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link custom-url-to-featured-image allows DOM-Based XSS.This issue affects Add Featured Image Custom Link: from n/a through = 2.0.0...

CVE-2025-62108: Missing Authorization

Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through = 4.80...

WordPress plugin Signature Add-On for Gravity Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabilit...

PT-2025-54340

Name of the Vulnerable Software and Affected Versions SaifuMak Add Custom Codes versions through 4.80 Description An authorization issue exists in SaifuMak Add Custom Codes due to incorrectly configured access control security levels. This allows for exploitation of the application. Recommendatio...

PT-2025-54329

Name of the Vulnerable Software and Affected Versions ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link versions through 2.0.0 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS condition. Thi...

WordPress plugin "Add Custom Codes" has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-54322

Name of the Vulnerable Software and Affected Versions SaifuMak Add Custom Codes versions through 4.80 Description A flaw exists in SaifuMak Add Custom Codes that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successfu...

CVE-2025-62099: Missing Authorization

Missing Authorization vulnerability in approveme Signature Add-On for Gravity Forms gravity-signature-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Signature Add-On for Gravity Forms: from n/a through = 1.8.6...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993256 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993236 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993200 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992841 advisory. In the Linux kernel, the following vulnerability has been resolved: chardev: fix error handling in cdevdeviceadd While doing fault injection test, I got the followin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993295 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992800 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993195 advisory. In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in dorbdadd when rbddevcreate fails If getting an ID or setting up a wo...