Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989962 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990380 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure traceprintk can output as soon as it can be used Currently traceprintk can be...

WordPress plugin The Events Calendar SQL注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A SQL injection...

PT-2025-45099

Name of the Vulnerable Software and Affected Versions The Events Calendar plugin for WordPress versions through 6.15.9 Description The Events Calendar plugin for WordPress has an information disclosure issue. The sysinfo REST endpoint performs a weak comparison between the provided key and the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990283 advisory. In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is...

CVE-2025-41344

creationtimestamp| type| source ---|---|--- 2025-11-04 14:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4srbqscvl2s 2025-11-04 15:36:03+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suf2vu4kx2...

CVE-2025-20736

creationtimestamp| type| source ---|---|--- 2025-11-04 08:45:26+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5h2t4a3x2 2025-11-04 09:38:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4safq34k72a...

CVE-2025-11563

creationtimestamp| type| source ---|---|--- 2025-11-04 07:44:19+00:00| seen| https://seclists.org/oss-sec/2025/q4/127 2025-11-04 08:43:16+00:00| seen| https://mastodon.social/users/bagder/statuses/115490540139486022 2025-11-04 08:43:29+00:00| seen|...

CVE-2025-35021

creationtimestamp| type| source ---|---|--- 2025-11-03 23:06:00+00:00| seen| http://takeonme.org/cves/cve-2025-35021/ 2025-11-04 01:31:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4rfa5ugvw2d 2025-11-04 01:47:17+00:00| seen|...

WordPress Community Events plugin <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by ifoundbug in WordPress Plugin Community Events versions = 1.5.2...

CVE-2025-45959

creationtimestamp| type| source ---|---|--- 2025-11-03 20:06:23+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qsz3xxtpi2 2025-11-03 21:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qyjfnvyz2q...

kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt injection due to GIF being cleared, since it's trivial for userspace to force the situation via KVMSETVCPUEVENTS even if having at least...

CVE-2025-12614

creationtimestamp| type| source ---|---|--- 2025-11-03 06:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4pe25qerf2k 2025-11-03 06:25:32+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pf5veb6qq2...

PT-2025-53014

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel’s Panthor DRM driver contains a use-after-free issue. The panthor fw unplug function frees firmware memory sections, but pending firmware events may still be processing ...

CVE-2025-12175

The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'tecqrcodemodal' AJAX endpoint in all versions up to, and including, 6.15.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to vi...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Tracing: Add downwritetraceeventsem when adding a trace event. When a module is loaded, it adds trace events defined by that module. It may also be necessary to modify the module’s trace printk formats by replacing enum names wit...

EUVD-2025-37417

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-11995

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-11995 Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-11995 Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...