22203 matches found
WordPress plugin integration with Google Drive: information leakage vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin integrate-google-drive has an information disclosure vulnerability, the...
HCL BigFix Query security vulnerabilities
HCL BigFix Query is a module for querying and collecting system status data in real-time from HCL India. A security vulnerability exists in HCL BigFix Query that stems from an HTTP GET endpoint request in the WebUI Query application returning a discoverable response that could disclose the group...
CVE-2025-31954: Use of GET Request Method With Sensitive Query Strings
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988853)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988853 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel: fix a possible null pointer dereference In versatilepanelgetmodes, the return value of...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989929)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989929 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989334)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989334 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988866)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988866 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989481)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989481 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990314)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990314 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990030)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990030 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988936)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988936 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platformgetresource It will cause...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990190)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990190 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988814)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988814 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989174 advisory. In the Linux kernel, the following vulnerability has been resolved: can: dev: cangetechoskb: prevent call to kfreeskb in hard IRQ context If a driver calls...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990173)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990173 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreference...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989732)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989732 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989376)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989376 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989816)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989816 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988997)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988997 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use an...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988745 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuzeparseregulatorsdt ofnodeget returns a node with...