Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986428 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

PT-2025-41166

Name of the Vulnerable Software and Affected Versions Dependency-Track versions prior to 4.13.5 Description Dependency-Track is a component analysis platform used for managing software supply chain risk. Versions prior to 4.13.5 may inadvertently transmit credentials intended for a private NuGet...

Unity Linux 20.1070e Security Update: exempi (UTSA-2025-987411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987411 advisory. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414334 advisory. A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986837 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress If during...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381297 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint...

PT-2025-41006

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description The Planet WGR-500 device contains OS command injection flaws within the formPingCmd functionality. Specifically crafted HTTP requests can result in arbitrary command execution. The issue is...

PT-2025-41043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an error in the fake init function was not properly handled. Specifically, a failure in root device register was ignored, potentially leading to...

PT-2025-41038

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mac80211 module related to the handling of association failures with access points. Specifically, a null pointer dereference can occur when attempting...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in Planet WGR-500 v1.3411b190912, which stems from a stack buffer overflow in the ipaddr request parameter and could lead to the execution of arbitrary code...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986647 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation The reference counting iss...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987246 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 powerpc/32: Fix...

EUVD-2025-32582

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...

CVE-2025-59452

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...

ALPINE-CVE-2025-61985

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...

UBUNTU-CVE-2025-61985

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...

EUVD-2025-32547

The BATBToken smart contract address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a contains incorrect access control implementation in whitelist management functions. The setColdWhiteList and setSpecialAddress functions in the base ERC20 contract are declare...

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

EUVD-2025-32528

A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly...