1039124 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992512)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992512 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2capchanholdunlesszero after calling...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992320)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992320 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix KASAN use-after-free Read in computeeffectiveprogs Syzbot found a Use After Free bug in...
Linux Distros Unpatched Vulnerability : CVE-2023-54216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is using the eswitch object mapping pool while in nic mode where it isn't initialized. This...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992439)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992439 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix overlap expiration walk The lazy gc on insert that should remove...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992395)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992395 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992359)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992359 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when index is 0 KASAN reported follow problem: BU...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992313)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992313 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bgmac: Fix a BUG triggered by wrong bytescompl On one of our machines we got: kernel BUG at...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992349)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992349 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Fix global-out-of-bounds bug in rtl8812aephysettxpowerlimit There is a...
AZL-73353 CVE-2025-15284 affecting package js-jquery 3.5.0-4
Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...
AZL-73316 CVE-2025-15284 affecting package js-jquery 3.5.0-4
Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...
AZL-73319 CVE-2025-15284 affecting package nodejs-nodemon 2.0.3-5
Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...
UBUNTU-CVE-2025-15284
Improper Input Validation vulnerability in qs parse modules allows HTTP DoS.This issue affects qs: 6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation a=1&a=2, only for indexed notation a0=1. This is a consistency bug; arrayLimit should apply uniformly across a...
CVE-2025-68431
libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in HeifPixelImage::overlay. The function computes a negative row length likely from an unclipped overlay rectangle or...
Content-Type Spoofing in LollMS Image Upload
Executive Summary A security vulnerability has been identified in LollMS that allows authenticated users to bypass file type validation by spoofing the Content-Type header. The /api/upload/chatimage endpoint only validates the HTTP header, not the actual file content, allowing malicious files to ...
Non-utf8 String can be created with `TimeBuf::as_str`
The function gixdate::parse::TimeBuf::asstr can create an illegal string containing non-utf8 characters. This violates the safety invariant of TimeBuf and can lead to undefined behavior when consuming the string. The bug can be prevented by adding str::fromutf8 to the function TimeBuf::write...
CVE-2025-59946
NanoMQ MQTT Broker NanoMQ is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2...
OSV-2025-1039 UNKNOWN WRITE in fuzz_regexp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=471926738 Crash type: UNKNOWN WRITE Crash state: fuzzregexp...
CVE-2025-65570
CVE-2025-65570 describes a type confusion in jsish 2.0 where, inside a for-in loop, an array element access used as the left-hand operand in an instanceof expression leaves an extra array reference on the stack. When OP_NEXT runs, it may treat the array as an iterator object and read an invalid f...
PT-2025-53762
Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d abi tags function within the cp-demangle.c file. This can lead to a denial of service when processing specially crafted PE files. Recommendations Update to a newer version that contain...
