Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993195 advisory. In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in dorbdadd when rbddevcreate fails If getting an ID or setting up a wo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993236 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992800 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993295 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...

PT-2025-54322

Name of the Vulnerable Software and Affected Versions SaifuMak Add Custom Codes versions through 4.80 Description A flaw exists in SaifuMak Add Custom Codes that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successfu...

WordPress plugin Add Custom Codes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Signature Add-On for Gravity Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabilit...

PT-2025-54340

Name of the Vulnerable Software and Affected Versions SaifuMak Add Custom Codes versions through 4.80 Description An authorization issue exists in SaifuMak Add Custom Codes due to incorrectly configured access control security levels. This allows for exploitation of the application. Recommendatio...

Linux Distros Unpatched Vulnerability : CVE-2022-50846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: via-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993246 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/drv: Fix potential memory leak in drmdevinit drmdevinit will add drmdevinitrelease as a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993256 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993200 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

CVE-2025-15354 itsourcecode Society Management System add_admin.php sql injection

A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/addadmin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

EUVD-2023-60486

In the Linux kernel, the following vulnerability has been resolved: net/smc: use smclgrlist.lock to protect smclgrlist.list iterate in smcrportadd While doing smcrportadd, there maybe linkgroup add into or delete from smclgrlist.list at the same time, which may result kernel crash. So, use...

EUVD-2023-60483

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...

EUVD-2023-60437

In the Linux kernel, the following vulnerability has been resolved: mmc: sunplus: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, 1. the memory allocated in mmcallochost will be leaked 2. null-ptr-deref will happen when calling mmcremovehost in...

EUVD-2023-60456

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

EUVD-2022-55910

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

CVE-2023-54321

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...