33734 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988927)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988927 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990236)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990236 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990221)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990221 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space wh...
MGASA-2025-0256 Updated golang packages fix security vulnerabilities
Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...
Jellysweep uses uncontrolled data in image cache API endpoint
Impact The /api/images/cache which is used to download media posters from the server accepted an url parameter, which was directly passed to the cache package and that downloaded the poster from this URL. This URL parameter can be used to make the jellysweep server download arbitrary content. The...
CVE-2025-12456
creationtimestamp| type| source ---|---|--- 2025-11-04 05:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rt66z2ij2x...
CVE-2025-47368
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-47368 Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-47368 Buffer Over-read in DSP Service
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-47368
CVE-2025-47368 affects Qualcomm DSP Service (Memory corruption in MCDM IOCTL processing when dereferencing an invalid userspace address in a user buffer). The CVSS v3.1 vector indicates a Local, Low-Complexity exploit with Low Privileges Required, no user interaction, and impacts on confidentiali...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43493
CVE-2025-43493 affects multiple Apple platforms. The issue, caused by insufficient checks, may allow address bar spoofing when a user visits a malicious website. Affected products/versions include macOS Tahoe 26.1; iOS 26.1 and iPadOS 26.1; Safari 26.1; iOS 18.7.2 and iPadOS 18.7.2; visionOS 26.1...
LinkAce 代码问题漏洞
LinkAce is a self-hosted archive of links to your favorite websites by Kevin Woblick Individual Developer. A code issue vulnerability exists in LinkAce 2.3.0 and prior versions that stems from a failure to validate that the target of a user-supplied URL is an internal or private network resource,...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when an invalid userspace address is dereferenced during MCDM IOCTL processing...
PT-2025-44932
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. This can lead to a buffer over-read in the DSP Service. Recommendations At the...
Apple多款产品 安全漏洞
website is a library from Challenge open source. Contains files for the new DIKULAN website not dependent on Joomla. ch is a ClickHouse open source low-level Go client for ClickHouse. A security vulnerability exists in several Apple products that stems from the fact that accessing a malicious...
