EUVD-2018-6857

Malware in sbrugna...

EUVD-2021-1488

Malware in sbrugna...

EUVD-2015-0926

Malware in sbrugna...

EUVD-2020-0407

Malware in sbrugna...

EUVD-2017-18213

Malware in sbrugna...

EUVD-2021-1272

Malware in sbrugna...

EUVD-2009-0444

Malware in sbrugna...

EUVD-2021-15909

Malware in sbrugna...

EUVD-2021-0040

Malware in sbrugna...

EUVD-2017-16493

Malware in sbrugna...

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414645 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414405 advisory. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414402 advisory. network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414644 advisory. An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414632 advisory. Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilitie...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414310 advisory. A use-after-free flaw was found in vhostnetsetbackend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414666 advisory. An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: protobuf (UTSA-2025-984777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984777 advisory. Any project that uses Protobuf Pure-Python backendto parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or ...

curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)

Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...