Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990192 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990064 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989606 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989739 advisory. In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989434 advisory. In the Linux kernel, the following vulnerability has been resolved: block: don't delete queue kobject before its children kobjects aren't supposed to be deleted befo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989213 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989595 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989782 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988769 advisory. In the Linux kernel, the following vulnerability has been resolved: afnetlink: Fix shift out of bounds in group mask calculation When a netlink message is received,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988802 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default...

CVE-2025-48076

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-48076

Galette (open-source membership management app) contains a cross-site scripting (XSS) vulnerability in versions 1.1.5.2 and earlier, arising from the ability to edit a group name and insert an XSS payload. The issue is resolved in version 1.2.0. No exploitation details are provided beyond the XSS...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-12463

An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the Group parameter in the /uapi-cgi/viewer/Param.cgi script. This has been confirmed on the EFD-2130 camera running firmware version 1.12.0.19...

Galette 安全漏洞

Galette is a Galette open source membership management web application for non-profit organizations. A security vulnerability exists in Galette version 1.1.5.2 and earlier, which stems from a vulnerability that allows users to edit group names and insert XSS payloads, potentially leading to...

PT-2025-45044

Name of the Vulnerable Software and Affected Versions Galette versions 1.1.5.2 and below Description Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert a Cross-site Scripting XSS payload. This...

CVE-2025-48076: Improper Neutralization of Alternate XSS Syntax

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

EUVD-2025-37502

An unauthenticated SQL Injection was discovered within the Geutebruck G-Cam E-Series Cameras through the Group parameter in the /uapi-cgi/viewer/Param.cgi script. This has been confirmed on the EFD-2130 camera running firmware version 1.12.0.19...