20365 matches found
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
SourceCodester Markdown to HTML Converter 安全漏洞
SourceCodester Markdown to HTML Converter is an open source markdown to html converter from SourceCodester. A security vulnerability exists in SourceCodester Markdown to HTML Converter v1.0, which stems from the Markdown Input field being vulnerable to cross-site scripting attacks that could lead...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-398435)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-398435 advisory. In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414565)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414565 advisory. A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986355)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986355 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936108)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936108 advisory. A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filterframe at libavfilter/vffieldorder.c, which might lead to memory corruption and other potenti...
Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-680593)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680593 advisory. There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not...
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987323)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987323 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digitaltglistenmdaa 'params' is allocated in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414476)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414476 advisory. There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space. Tenable has...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987019)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987019 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987343)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987343 advisory. In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986866)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986866 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987165)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987165 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986415)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986415 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...
Planet WGR-500 formPingCmd format string vulnerability
Talos Vulnerability Report TALOS-2025-2228 Planet WGR-500 formPingCmd format string vulnerability October 7, 2025 CVE Number CVE-2025-48826 SUMMARY A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests c...
PT-2025-46739
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's crypto/skcipher implementation related to the handling of request sizes. A change introduced by commit afddce13ce81d added the cra reqsize field in th...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL statements by injecting crafted input, potentially leading to unauthorized data access or manipulation. Remediation Upgrade...
SQL Injection
Overview org.xwiki.platform:xwiki-platform-oldcore is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL...
