HPESBST04822 rev.2 - HPE GreenLake for Block Storage OS, HPE Alletra 9000 OS, HPE 3PAR OS, and HPE Primera OS, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE GreenLake for Block Storage OS - Prior to 10.4.8 HPE Alletra 9000 - Prior to 9.6.3 - Operating System HPE 3PAR Operating System Software - Prior ...

CLSA-2025-1742723370 krb5: Fix of CVE-2025-24528

CVE-2025-24528: prevent overflow when calculating ulog block size...

CLSA-2025-1742662173 krb5: Fix of CVE-2025-24528

CVE-2025-24528: prevent overflow when calculating ulog block size...

CVE-2025-2303

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the blocklogicchecklogic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for...

CVE-2025-2303 Block Logic <= 1.0.8 - Authenticated (Contributor+) Remote Code Execution

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the blocklogicchecklogic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for...

CVE-2025-2303 Block Logic <= 1.0.8 - Authenticated (Contributor+) Remote Code Execution

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the blocklogicchecklogic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for...

CVE-2025-2303

CVE-2025-2303 (Block Logic – Full Gutenberg Block Display Control) affects the WordPress Block Logic plugin (versions

WordPress plugin Block Logic 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

CVE-2025-2303: Improper Control of Generation of Code

The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.8 via the blocklogicchecklogic function. This is due to the unsafe evaluation of user-controlled input. This makes it possible for...

WordPress Block Logic plugin <= 1.0.8 - Authenticated (Contributor+) Remote Code Execution vulnerability

Authenticated Contributor+ Remote Code Execution vulnerability discovered by Olly in WordPress Plugin Block Logic versions = 1.0.8...

SUSE CVE-2024-8063

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the Modelfile. This can lead to a denial of service DoS condition when the server processes the model, causing it to crash...

PT-2025-12470

Name of the Vulnerable Software and Affected Versions The Block Logic – Full Gutenberg Block Display Control plugin for WordPress versions 1.0.8 and earlier Description The Block Logic – Full Gutenberg Block Display Control plugin for WordPress is vulnerable to Remote Code Execution due to the...

PT-2025-16676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which could cause random stack corruption after get block is called. This issue occurs when get block is called with a buffer head...

The vulnerability of the bdev_open_by_dev() function in the block/bdev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bdevopenbydev function in the block/bdev.c module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ntfs_get_block_vbo()` function in the `fs/ntfs3/inode.c` module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ntfsgetblockvbo function in the fs/ntfs3/inode.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 7 : openstack-cinder, openstack-glance, and openstack-nova update (Moderate) (RHSA-2016:2991)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2991 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the concatenateForRewrite method in JettyUtils when the management proxy is enabled - which it is in the default configuration. An attacker can manipulate the URL to redirect requests to an arbitrary...

CLSA-2025-1742471200 kernel: Fix of 19 CVEs

net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/fs/ggml to version 0.6.3-rc1 or...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero when handling an invalid unknown.blockcount type in a Modelfile. An attacker can cause the application to crash by importing a malicious GGUF. Remediation Upgrade github.com/ollama/ollama/llm to version 0.6.3-rc1 or...