VulnCheck KEV: CVE-2025-69200

phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via POST /api/setup/backup and then download the generated ZIP from a web-accessible location. The ZIP contains sensitive...

CVE-2026-23523

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the...

ABB Ability OPTIMAX

SUMMARY ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited. An attacker who...

CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000967 advisory. The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users t...

MiracleLinux 7 : ntp-4.2.6p5-28.0.1.el7.AXS7 (AXSA:2018-2935:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2935:01 advisory. ntp: Authenticated DoS via Malicious Config Option CVE-2017-6463 ntp: Denial of Service via Malformed Config CVE-2017-6464 ntp: Buffer Overflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001199 advisory. drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003681 advisory. Two memory leaks in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004761 advisory. An integer overflow flaw was found in the Linux kernels virtio device driver code in the way a user triggers the vhostvdpaconfigvalidate function. This flaw allows a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003822)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003822 advisory. Two memory leaks in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003790 advisory. Memory leaks in drivers/net/wireless/ath/ath9k/htchst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption by...

MiracleLinux 4 : ntp-4.2.6p5-12.1.0.1.AXS4 (AXSA:2017-2400:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2400:02 advisory. Two vulnerabilities were discovered in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to...

MiracleLinux 4 : 389-ds-base-1.2.11.15-14.AXS4 (AXSA:2013-412:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-412:03 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...

MiracleLinux 7 : dnsmasq-2.76-2.el7.2 (AXSA:2017-2341:02)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-2341:02 advisory. A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq...

CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

UBUNTU-CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

USN-7916-2 python-apt regression

USN-7916-1 fixed a vulnerability in python-apt. The update had a PEP 440 incompatible version. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Julian Andres Klode discovered that python-apt incorrectly handled deb822 configuration files. An attacker...

CVE-2025-71099

A use-after-free flaw was found in the Intel Xe graphics driver's observability architecture OA configuration interface. In xeoaaddconfigioctl, the oaconfig-id is accessed after dropping the metricslock. An attacker could race to remove the configuration via xeoaremoveconfigioctl, freeing the...

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

Web2Print Tools Bundle for Pimcore Security Vulnerabilities

Web2Print Tools Bundle for Pimcore is an open-source extension suite developed for Pimcore. Versions prior to 5.2.2 and 6.1.1 of Web2Print Tools Bundle for Pimcore contained security vulnerabilities. These vulnerabilities stemmed from the lack of server-side authorization checks for API endpoints...