Linux Kernel Trace Eprobe Heap Buffer Overflow DoS

The vulnerability of the traceeprobecreate function in the kernel/trace/traceeprobe.c module, which supports tracing of the Linux operating system’s kernel, is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: SNYK:PYTHON-DATASETTE-13849308...

CVE-2025-12674

The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the createmedia function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990406 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990488 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0,...

PT-2025-45613

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990386 advisory. In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is...

A Bootiful Podcast: The Vaadin team, live from Vaadin Create 2025

Hi, Spring fans! In this installment, I had the privilege to sit down with Vaadin legends Joonas Lehtinen, Marcus Hellberg, and Leif Åstrand at the amazing Vaadin Create 2025 event in Frankfurt, Germany...

GO-2025-4021 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni

Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni...

CVE-2025-12674 KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload

The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the createmedia function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server...

CVE-2025-12676

CVE-2025-12676 concerns KiotViet Sync for WordPress (versions up to 1.8.5). According to multiple sources, the root cause is a hard-coded password used for authentication inside QueryControllerAdmin::authenticated, enabling unauthenticated attackers to create and sync products. Public details con...

Linux page_pool_create Heap Buffer Overflow DoS

The vulnerability of the pagepoolcreate function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989695 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989922 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989436 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988911 advisory. In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovlcreatereal Syzbot triggered the following warning in ovlworkdircreate -...

WordPress plugin Document Embedder – Embed PDFs Word Excel and Other Files 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Document Embedder -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988724 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990128 advisory. In the Linux kernel, the following vulnerability has been resolved: afpacket: avoid erroring out after sockinitdata in packetcreate After sockinitdata the allocated ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990348 advisory. In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inetcreate sockinitdata attaches the allocated s...