CVE-2025-62742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.io Curator.io curatorio allows Stored XSS.This issue affects Curator.io: from n/a through = 1.9.5...

PT-2026-2937

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A heap use-after-free condition exists in the irp thread func function because the IRP is freed by irp-Complete and subsequently...

PT-2026-26119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/rw functionality where an allocated iovec may be freed incorrectly during a read/write request cleanup process. Specifically, if a read/write...

PT-2026-6137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue involves a signedness bug in the arm lpae unmap function within the io-pgtable-arm component of the Linux kernel. The function incorrectly returns a negative error code -ENOENT...

PT-2026-27721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A logic error exists in the drbd al begin io nonblock function within the Linux kernel’s DRBD module. The issue arises from a potential failure in lc get cumulative while holding the...

PT-2026-8106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the io uring/io-wq subsystem. Specifically, processing a large number of 2GB - 4096B reads from a /dev/msr file using loop rw iter can take an...

PT-2026-27734

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-611.5.1.el9 7 Description The Linux kernel contained an issue where multiple udev threads could collect i801 device information concurrently during boot. This could lead to a kernel panic because the i801...

CVE-2025-66103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: from n/a through = 0.9.5.9...

EUVD-2025-206032

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

CVE-2025-62081

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through =...

EUVD-2025-206045

Missing Authorization vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

CVE-2025-62742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.io Curator.io curatorio allows Stored XSS.This issue affects Curator.io: from n/a through = 1.9.5...

EUVD-2025-205969

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Curator.Io allows Stored XSS.This issue affects Curator.Io: from n/a through 1.9.5...

SUSE CVE-2023-54271

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkgpolicydata being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:rawspinlock+0x17/0x30...

PT-2025-54360

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992828 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Allow waiting for commands to complete on removed device When a SCSI device is removed...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993185 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memsetio In the function s3fbsetpar, the valu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993000 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vt8623fb: Check the size of screen before memsetio In the function vt8623fbsetpar,...

PT-2025-54323

Name of the Vulnerable Software and Affected Versions Curator.Io versions through 1.9.5 Description A flaw exists in Curator.Io that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could potentially all...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992804 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving...