EUVD-2009-3286

Malware in sbrugna...

EUVD-1999-0841

Malware in sbrugna...

EUVD-2018-11261

Malware in sbrugna...

EUVD-2003-0636

Malware in sbrugna...

EUVD-2004-2625

Malware in sbrugna...

PT-2025-41169

Name of the Vulnerable Software and Affected Versions AWS VPN Client for macOS versions 1.3.2 through 5.2.0 Description A flaw exists in the AWS VPN Client for macOS that allows a local user to execute code with elevated privileges. Insufficient validation of the log destination directory during...

Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-669607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-669607 advisory. An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inod...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pam (UTSA-2025-986122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986122 advisory. A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986578 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a KMSAN: uninit-value in picklink bug...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680629 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987118 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pam (UTSA-2025-986091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986091 advisory. A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986502)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986502 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: multipath-tools (UTSA-2025-680596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680596 advisory. multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to acces...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680628 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986447 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is...

Important: Red Hat Security Advisory: Red Hat build of Cryostat 4.0.3: new RHEL 9 container image security update

New Red Hat build of Cryostat 4.0.3 on RHEL 9 container images are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Directory Traversal

Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...

ZenML 安全漏洞

ZenML is an extensible open source MLOps framework from ZenML Open Source for creating portable, production-ready machine learning pipelines. An input validation error vulnerability exists in ZenML version 0.83.1, which stems from the failure of the PathMaterializer class to effectively detect...

RLSA-2025:6990 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: reader/jpe...