Unbreakable Enterprise kernel security update

5.15.0-311.185.9 - nfs: ignore SBRDONLY when remounting nfs Li Lingfeng Orabug: 37781252 5.15.0-311.185.8 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38182400 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189328 5.15.0-311.185.7 - perf: Fix...

Weee RICEPO App 安全漏洞

Weee RICEPO App is a takeout app from Weee, Inc. A security vulnerability exists in Weee RICEPO App version 6.17.77, which stems from improper export of Android application components...

Linux Distros Unpatched Vulnerability : CVE-2022-49776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: macvlan: enforce a consistent minimal mtu macvlan should enforce a minimal mtu of 68, even a...

PT-2025-32400

Name of the Vulnerable Software and Affected Versions: Cyclope Employee Surveillance Solution versions 6.x Description: Cyclope Employee Surveillance Solution versions 6.x contains a SQL injection flaw in its login mechanism. The username parameter in the auth-login POST request is not properly...

Cyclope Employee Surveillance Solution 安全漏洞

Cyclope Employee Surveillance Solution is an employee monitoring software from Cyclope, Inc. A security vulnerability exists in Cyclope Employee Surveillance Solution version 6.x, which stems from the username parameter not being cleaned up in the auth-login request, and could lead to SQL injecti...

CVE-2025-38260 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38260 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

IBM Tivoli Monitoring 安全漏洞

IBM Tivoli Monitoring is a suite of system monitoring software from International Business Machines IBM. The software supports detection of system bottlenecks and potential problems, performance monitoring of essential system resources, automatic recovery from critical situations, and more. A...

OpenText Advanced Authentication 安全漏洞

OpenText Advanced Authentication is an advanced authentication framework from OpenText Canada. A security vulnerability exists in OpenText Advanced Authentication version 6.5.0 and earlier, which originates from a malicious browser plug-in that can record and replay the user authentication proces...

QCMS 安全漏洞

Velvet Ease Technology QCMS is an open source content management system CMS for creating responsive websites from China's Velvet Ease Technology. A security vulnerability exists in QCMS version 6.0.5, which stems from insufficient validation of the Name parameter in the back-end template editor,...

PT-2025-33768

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0+ Description: The benet driver in the Linux kernel experiences a crash when creating Single Root I/O Virtualization SRIOV Virtual Functions VFs. This occurs because be cmd set mac list calls dma free...

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter word in the file /admin/sensitiveword/list, which could lead to a cross-site scripting...

CVE-2025-44961

In RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user...

UBUNTU-CVE-2025-54574

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access...

DEBIAN-CVE-2025-45767

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...

Security update for python311

This update for python311 fixes the following issues: CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. Update to 3.11.13: Security gh-135034: Fixes multiple issues that allowed tarfile extraction filters filter="data...

php-jwt contains weak encryption

php-jwt v6.11.0 was discovered to contain weak encryption...

GHSA-2X45-7FC3-MXWQ php-jwt contains weak encryption

php-jwt v6.11.0 was discovered to contain weak encryption...

PHP-JWT 安全漏洞

PHP-JWT is a simple library open-sourced by Firebase for encoding and decoding JSON Web Tokens JWT in PHP, compliant with RFC 7519. A security vulnerability exists in PHP-JWT version v6.11.0 that stems from weak encryption...