Google Chrome 安全漏洞

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a Permission Misimplementation Vulnerability, no details of the vulnerability are provided at this time...

keycloak: Keycloak error_description injection on error pages

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading...

CVE-2025-61994

Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted contents, an arbitrary script may be executed on the web browser of a victim user who accesses the page...

CVE-2025-53349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through = 3.18.3...

CVE-2025-61994

GROWI is affected by CVE-2025-61994: stored cross-site scripting in versions prior to 7.2.10 when a page with crafted content is created, potentially allowing arbitrary script execution in a victim’s browser. Remediation: upgrade to GROWI 7.3.0 or later (per JVN/Red Hat advisories). Other sources...

CVE-2025-61994

Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted contents, an arbitrary script may be executed on the web browser of a victim user who accesses the page...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990557 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990525 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in ext4writepages we got issue as follows: EXT4-fs error device loop0:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990473 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a large A...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990220 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989568 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extenttree is not created This patch avoids the below panic. pc :...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989838 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988997 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988981)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988981 advisory. In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in freepages When we upgraded our kernel, we started...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988740 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages struct page page has alrea...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990101 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989276 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989108 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in ext4writepages we got issue as follows: EXT4-fs error device loop0:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989832 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have other uses Oded Gabbay reports that enabling NU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989294 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fix memory leak caused by pgdfree pgd page is freed by generic implementation...