Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987455 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...

EUVD-2022-24702

Malicious code in bioql PyPI...

EUVD-2025-13167

Malicious code in bioql PyPI...

EUVD-2024-27565

Malicious code in bioql PyPI...

EUVD-2024-3021

Malicious code in bioql PyPI...

EUVD-2025-22616

Malicious code in bioql PyPI...

EUVD-2022-55060

Malicious code in bioql PyPI...

EUVD-2022-6873

Malicious code in bioql PyPI...

EUVD-2024-22949

Malicious code in bioql PyPI...

EUVD-2023-2611

Malicious code in bioql PyPI...

EUVD-2021-34374

Malicious code in bioql PyPI...

EUVD-2023-2291

Malicious code in bioql PyPI...

EUVD-2025-8491

Malicious code in bioql PyPI...

CVE-2025-39865 tee: fix NULL pointer dereference in tee_shm_put

In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in teeshmput teeshmput have NULL pointer dereference: opteedisableshmcache -- shm = regpairtoptr...;//shm maybe return NULL teeshmfreeshm; -- teeshmputshm;//crash Add check in teeshmput to fix it...

CVE-2025-43272

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from accessing unallocated eeprom.data, which could cause the kernel to crash...

CVE-2025-58754

Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the data: scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory...

Linux Distros Unpatched Vulnerability : CVE-2012-3601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...

SUSE CVE-2025-39714

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming ffplay and another program qv4l2 changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC...

CVE-2025-39714

CVE-2025-39714 affects the Linux kernel media/usbtv subsystem. When streaming (e.g., ffplay) and another process changes TV standard NTSC↔PAL, the kernel could crash by copying to unmapped memory, caused by an overflow in the usbtv video plane buffer due to the struct’s increased resolution not b...