Google Looker security vulnerabilities

Google Looker is an intelligent business platform from Google USA. A security vulnerability exists in Google Looker that stems from improper file path cleanup and could lead to a command injection attack...

Number withdrawal

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

Important: tigervnc

Issue Overview: A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potential...

Persistent Temp-File incomplete cleanup / resource exhaustion in `transformers` Serve

Description The transformers OpenAI-compatible server leaks every base64 image it decodes to disk. Because the temporary files are never cleaned up, an attacker can exhaust disk space by repeatedly calling /v1/chat/completions with base64 imageurl entries. Vulnerable Code In...

PT-2025-51658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's netpoll functionality related to incorrect reference counting during cleanup operations. A previously committed fix efa95b01da18, "netpoll: fix use...

SourceCodester User Account Generator Security Vulnerabilities

SourceCodester User Account Generator is an open source user account generator from SourceCodester. A security vulnerability exists in SourceCodester User Account Generator version 1.0, which stems from improper input cleanup of the Username Prefix field, and could lead to a cross-site scripting...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

Advantech DeviceOn/iEdge cross-site scripting vulnerability

Advantech DeviceOn/iEdge is a remote management and operation and maintenance platform for edge devices from Advantech, Taiwan, China. A cross-site scripting vulnerability exists in Advantech DeviceOn/iEdge, which stems from insufficient cleanup of dashboard labels or path inputs, and can be...

Linux l2cap_sock_cleanup_listen DoS

The vulnerability of the l2capsockcleanuplisten function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the sevmappercpudata function in the arch/x86/kernel/kvm.c module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel smcd_register_dev Buffer Overflow DoS

The vulnerability of the smcdregisterdev function in the net/smc/smcism.c module, which implements networking functions for the Linux operating system’s kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a...

Linux Kernel KVM Hypercall4 Buffer Overflow DoS

The vulnerability of the kvmhypercall4 function in the arch/x86/include/asm/kvmpara.h module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access protected informatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990384)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990384 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk was...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989678)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989678 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990032 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989268 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989991 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use-after-free in rtl8712dlfw Syzbot reported use-after-free in rtl8712dlfw...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989230 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clean up hook list when offload flags check fails splice back the hook list ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989218 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

SelfBest security vulnerabilities

SelfBest is a development-focused platform from SelfBest, Inc. in the United States. A security vulnerability exists in SelfBest version 2023.3, which stems from insufficient cleanup and escaping of chat message input fields in the chat feature, which could lead to a stored cross-site scripting...