CVE-2026-25616

Blesta CVE-2026-25616 affects Blesta versions 3.x through 5.x before 5.13.3 due to mishandling of input validation (CORE-5665). Multiple sources (Red Hat, CVE listing, PacketStorm) indicate impacts include input handling defects that enable cross-site scripting in certain endpoints, with the cano...

CVE-2026-24872 Pointer arithmetic error in SkyFire_548

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

CVE-2026-24381

Server-Side Request Forgery SSRF vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This issue affects PhotoMe: from n/a through 5.7.2...

CVE-2025-67952

CVE-2025-67952 is a reflected XSS in the WordPress ThemeGoods Grand Tour theme prior to version 5.6.2. The initial record confirms the vulnerability and affected version, with remediation via upgrading to 5.6.2 or later (patched). The connected sources also catalog the same CVE across multiple fe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001571 advisory. In drivers/char/virtioconsole.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf-len value...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003590 advisory. An issue was discovered in drivers/scsi/qedi/qedidbg.c in the Linux kernel before 5.1.12. In the qedidbg family of functions, there is an out-of-bounds read. Tenable...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003855 advisory. There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003811 advisory. A memory leak in the mlx5fpgaconncreatecq function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001410 advisory. A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004297 advisory. In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004155 advisory. A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004133 advisory. getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004020 advisory. Four memory leaks in the nfpflowerspawnphyreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to caus...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001505 advisory. A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race...

PT-2026-1959

Name of the Vulnerable Software and Affected Versions Asseco InfoMedica versions prior to 4.50.1 Asseco InfoMedica versions prior to 5.38.0 Description Asseco InfoMedica stores user passwords in an encoded format within a database. An attacker with access to these encoded passwords can decode the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000402 advisory. The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000228)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000228 advisory. In the Linux kernel before 5.1, there is a memory leak in featregistersp in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b. Tenable has...

PT-2026-1068

Name of the Vulnerable Software and Affected Versions PluXml versions prior to 5.8.23 Description A flaw exists in PluXml that could allow for remote code execution. The issue is located in the FileCookieJar:: destruct function within the core/admin/medias.php file of the Media Management Module...

CVE-2025-64190

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through 5.6...

EUVD-2025-205820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme.Com XStore Core allows DOM-Based XSS.This issue affects XStore Core: from n/a before 5.6...