Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990378 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

PT-2025-45161

Name of the Vulnerable Software and Affected Versions PocketVJ CP versions 3.9.1 Description The application does not properly sanitize user input in the opacityValue POST parameter before it is used in a shell command. This allows remote attackers to execute arbitrary commands with root privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990046 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 is vulnerable to an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The root cause is a failure to sanitize user input provided in the opacityValue POST parameter before it is passed to a shell command. This all...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988785 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in r871xudrvinit When 'tmpU1b' returns from r8712read8padapter...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989468 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989349 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG The display pixel clock has a...

PT-2025-53010

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to BPF percpu hash maps. Missing calls to bpf obj free fields in pcpu copy value could lead to memory referenced by BPF KPTR REF,PERCPU fields...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990376 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msgid before read or write WHAT msgid is used as an array index and ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989461 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfsreaddir The stbl might contain some invalid values. Adde...

CVE-2025-21078: Undefined Security Weakness

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989003 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix early region not updated correctly The shadow's page table is not updated when...

CVE-2025-20730

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...

CVE-2025-20730

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...

CVE-2025-20730

A local privilege escalation vulnerability exists in the preloader of MediaTek Chipsets due to an insecure default value . A malicious actor who has already obtained System privileges can exploit this flaw to achieve elevated privileges without user interaction. Technical details indicate a logic...

EUVD-2025-37599

The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reusebuildersingleposttitle' shortcode in all versions up to, and including, 1.7. This is due to insufficient input sanitization and output escaping on the 'style' attribute. This makes it possible for...

CVE-2025-20730: Improper Authentication

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...

RockyLinux 8 : xorg-x11-server (RLSA-2025:19434)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19434 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...