182 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005647)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005647 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of...
OpenClaw 跨站请求伪造漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a cross-site request forgery vulnerability that stems from a browser-oriented local host change route accepting cross-domain browser requests without explicit Origin/Referer validation, which can be...
Cross-site Request Forgery (CSRF)
Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the csrfverify function, which only enforces checks for POST requests and returns...
SUSE CVE-2023-53780
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix FCLK pstate change underflow Why Currently we set FCLK p-state change watermark calculated based on dummy p-state latency when UCLK p-state is not supported How Calculate FCLK p-state change watermark based o...
CVE-2023-53780 drm/amd/display: fix FCLK pstate change underflow
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix FCLK pstate change underflow Why Currently we set FCLK p-state change watermark calculated based on dummy p-state latency when UCLK p-state is not supported How Calculate FCLK p-state change watermark based o...
CVE-2025-42616 CSRF vulnerability in CIRCL Vulnerability-Lookup
Some endpoints in vulnerability-lookup that modified application state e.g. changing database entries, user data, configurations, or other privileged actions may have been accessible via HTTP GET requests without requiring a CSRF token. This flaw leaves the application vulnerable to Cross-Site...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989824)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989824 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be...
EUVD-2014-8251
Malware in sbrugna...
EUVD-2020-23218
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987100 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls...
EUVD-2025-25851
Malicious code in bioql PyPI...
EUVD-2025-18617
Malicious code in bioql PyPI...
EUVD-2025-27903
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-4215
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the...
CVE-2025-0093
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-0093
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-0092
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-0092
CVE-2025-0092 : A permission bypass exists in Android’s Bluetooth stack, specifically in handleBondStateChanged of AdapterService.java, caused by a misleading or insufficient UI. This can lead to information disclosure to a proximal attacker without additional execution privileges; exploitation r...
CVE-2025-38560
CVE-2025-38560 concerns x86/sev SNP memory validation in the Linux kernel. The issue arises from how memory validation after a page state change to private handles cache eviction; a mitigation requires touching the first and last byte of each 4K page during validation when COHERENCY_SFW_NO is not...
