CVE-2022-50814

CVE-2022-50814 affects the Linux kernel crypto driver hisilicon/zip, where a mismatch in the sgl_sge_nr variable (type u16) occurs when reading/writing via param_get/set_int, triggering a KASAN global-out-of-bounds read. The documented fix is to replace param_get/set_int with param_get/set_ushort...

CVE-2025-65442

DOM-based Cross-Site Scripting XSS vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information e.g., user session cookies via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unused device management snddevmcardnew function, which could result in a memory access error when a modu...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to decrement the reference count when the bpfprogattach LSM program fails, which could lead to a...

PT-2025-54077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's fs/ntfs3 module related to handling the return value of the kmemdup function. The kmemdup function may return a NULL pointer, and a check for this...

PT-2025-54169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the CXL/PMEM subsystem during NVMe DIMM NVDIMM registration. Specifically, the issue occurs when the lower half of asynchronous NVDIMM device registration runs...

PT-2025-53973

In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpf prog attach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPF LSM CGROUP, we return too earl...

snap7-rs 安全漏洞

snap7-rs is a library for C++ by the individual developer gmg137. A security vulnerability exists in snap7-rs, which stems from an incorrect operation of the function snap7rs::client::S7Client::download in the file client.rs, which could result in a heap buffer overflow...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992400 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

PT-2025-53968

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00190-g39508d23b672 Description The Linux kernel contains an issue in the ipr init function within the SCSI subsystem. Specifically, ipr init does not call unregister reboot notifier when pci register...

PT-2025-54073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to ACPI Embedded Controller EC query handlers. Specifically, removing custom query handlers could lead to a kernel oops if the module containing...

URI 安全漏洞

URI is a Ruby open source module that provides classes to handle Uniform Resource Identifiers. A security vulnerability exists in URI versions prior to 0.12.5, 0.13.3, and 1.0.4, which stems from the possibility that sensitive information such as passwords in the original URI may be disclosed whe...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992396 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: tpmcrb: Add the missed acpiputtable to fix memory leak In crbacpiadd, we get the TPM2 table ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992170 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: Fix function prototype mismatch for ext4featktype With clang's kernel control flow integrit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992226 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefskernel,clientdebuginit When insert and remove the orangefs...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992362)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992362 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: Fix function prototype mismatch for ext4featktype With clang's kernel control flow integrit...

PT-2025-54103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the RDMA/srpt module related to the handling of MAD Management Agent agent pointers during unregistration. Specifically, a check for a valid 'mad...

CVE-2023-32238 WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

Vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...

EUVD-2025-205608

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...