34888 matches found
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990177)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990177 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...
EUVD-2025-37901
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990275 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings:...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990236)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990236 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...
CVE-2025-61304
Dynatrace ActiveGate versions up to 1.016 are vulnerable to an OS command injection flaw in the ping extension . The root cause is the improper handling and lack of validation of specially crafted IP addresses provided in the Test Target Host input field, which supports up to 1024 characters. An ...
PT-2025-45382
Name of the Vulnerable Software and Affected Versions Parse Server versions 4.2.0 through 7.5.3 Parse Server versions 8.0.0 through 8.3.1-alpha.1 Description Parse Server is an open source backend deployable on Node.js infrastructures. A Server-Side Request Forgery SSRF exists in the file upload...
CVE-2025-61304: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...
CVE-2025-61304
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990221)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990221 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space wh...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990160 advisory. In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo &&...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989821)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989821 advisory. In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc The 'profilepc' function is used for timer-based...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989122)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989122 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation The reference counting iss...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988927)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988927 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989361)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989361 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on block address in f2fsdozerorange As Yanming reported in bugzilla:...
MGASA-2025-0256 Updated golang packages fix security vulnerabilities
Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...
Jellysweep uses uncontrolled data in image cache API endpoint
Impact The /api/images/cache which is used to download media posters from the server accepted an url parameter, which was directly passed to the cache package and that downloaded the poster from this URL. This URL parameter can be used to make the jellysweep server download arbitrary content. The...
CVE-2025-12456
creationtimestamp| type| source ---|---|--- 2025-11-04 05:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rt66z2ij2x...
CVE-2025-47368
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
