CVE-2025-20358

A vulnerability in the Contact Center Express CCX Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnerability is due to improper authenticatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989318 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: memleak flow rule from commit path Abort path release flow rule object,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989282 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine In case the second xainsert...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989144 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix leak of nested actions While parsing user-provided actions, openvswitch...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988900 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988660 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a race on...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988959 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix page reclaim for dead peer hairpin When adding a hairpin flow, a firmware-side sen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989307 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release flow rule object from commit path No need to postpone this to the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989115 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large number of CPU...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989404 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed...

Temporal Analysis Framework for Intrusion Detection Systems: A Novel Taxonomy for Time-Aware Cybersecurity

Most intrusion detection systems still identify attacks only after significant damage has occurred, detecting late-stage tactics rather than early indicators of compromise. This paper introduces a temporal analysis framework and taxonomy for time-aware network intrusion detection. Through a...

PT-2025-46821

Name of the Vulnerable Software and Affected Versions pgAdmin versions prior to 9.9 Description The software is susceptible to an LDAP injection issue within the LDAP authentication process. An attacker can inject specific LDAP characters into the username field. This manipulation forces the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989364 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix a potential memory leak in r871xudrvinit In r871xudrvinit, if r8712initdrvs...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: The CT safe mode is now exited explicitly during unwinding. During driver probes, we may briefly use the CT safe mode, which relies on delayed tasks. Usually, we can stop this once the IRQ functions properly. However,...

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

ansible-flow (0.1.0) potentially affected by CVE-2020-25635 via ansible (1.9.6)

ansible PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-flow 0.1.0 Source cves: CVE-2020-25635 Source advisory: OSV:GHSA-F556-49JC-4RVC...

Improper Input Validation

flowise is vulnerable to improper input validation. The vulnerability is due to missing validation of chatflowId and chatId parameters, which allows an attacker to access arbitrary files through improper handling of file upload operations...

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

CVE-2023-53689

Nagios Fusion