Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936098 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inaviaddientry function. Tenable has extracted the preceding description block...

PT-2025-41202

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A weakness exists in Campcodes Advanced Online Voting Management System 1.0. The issue affects unknown code within the /admin/voters add.php file. Manipulation of the...

PT-2025-40957

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation versions up to 3.3 Description A flaw exists in code-projects Student Crud Operation that allows for unrestricted file uploads. This is due to manipulation of the move uploaded file function within the...

PT-2025-41190

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System that allows for SQL injection. The issue is located in the file /admin/voters add.php and involves...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986631 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sfp: fix memory leak in sfpprobe sfpprobe allocates a memory chunk from sfp with sfpalloc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381767 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987392 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414603 advisory. nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after- free that could be triggered by local attackers with access to t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986733 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391635 advisory. In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The following memory leak was reported after...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-393292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393292 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from blk-iolatency not properly cleaning up memory when adddisk fails, which could lead to a memory leak...

PT-2025-41037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1+ 189 Description The Linux kernel contains a flaw within the mpt3sas transport port add function in the SCSI subsystem. Specifically, if sas rphy add fails, the necessary resource freeing via sas rphy...

PT-2025-41192

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.46 Description A flaw exists in the Linker component of GNU Binutils, specifically within the elf link add object symbols function located in the bfd/elflink.c file. This issue leads to an out-of-bounds read...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-416543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416543 advisory. In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986763 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix percpu memory leak at nftablesaddchain It seems to me that percpu memory...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

EUVD-2025-32531

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...