40396 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986359)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986359 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414560)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414560 advisory. arch/x86/kvm/mmu/pagingtmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414366 advisory. In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986760 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix general protection fault in nilfsbtreeinsert If nilfs2 reads a corrupted disk image a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986780 advisory. In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axichanhandleerr function Since there is no...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986627)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986627 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix general protection fault in nilfsbtreeinsert If nilfs2 reads a corrupted disk image a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986585)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986585 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix general protection fault in nilfsbtreeinsert If nilfs2 reads a corrupted disk image a...
SUSE CVE-2025-39949
In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...
CVE-2025-11309
A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Impacted is the function doFilter of the file findDeptPage.do. Performing manipulation of the argument sort results in sql injection. It is possible to initiate the attack remotely. The explo...
Inside Microsoft Threat Intelligence: Calm in the chaos
Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response IR team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat...
CLSA-2025-1759780820 python3: Fix of CVE-2007-4559
CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability...
CVE-2025-0038
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...
CVE-2025-0038
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...
Defending against database ransomware attacks
How attackers exploit exposed databases for extortion—and the defenses that work...
EUVD-2025-32507
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials...
CVE-2025-58587
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials...
CVE-2025-11315 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findUserPage.do findUserPage sql injection
A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this vulnerability is the function findUserPage of the file findUserPage.do. Performing manipulation of the argument sort results in sql injection. Remote exploitation of the attack is...
CVE-2025-11311
A security vulnerability has been detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. The impacted element is the function findTenantPage of the file findTenantPage.do. The manipulation of the argument sort leads to sql injection. The attack can be initiated remotely. T...
PHPGurukul Hostel Management System 安全漏洞
Hostel Management System is a hostel management system. Hostel Management System is vulnerable to clickjacking, which occurs when the program does not adequately protect HTML iframes.No details of the vulnerability are available at this time...
RockyLinux 10 : kernel (RLSA-2025:10371)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10371 advisory. kernel: ipv6: mcast: extend RCU protection in igmp6send CVE-2025-21759 kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes...