(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRunPatch class. The issue results from the lack of proper validation of a...

MindManager Attachment Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindManager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986303 advisory. In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in Sy...

Unity Linux 20.1070a Security Update: rsync (UTSA-2025-984697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984697 advisory. inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414509 advisory. A heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesystem Context functionality of the Linux kernel verified the supplie...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a performance monitoring context that may migrate to a CPU that is about to shut down, potentially causing a...

(0Day) Ivanti Endpoint Manager PatchHistory SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the PatchHistory class. The issue results from the lack of proper validation of a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-411908)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411908 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuse...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-400059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-400059 advisory. In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug tha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987072 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Immediately reset the MMU context when the SMM flag is cleared Immediately reset the MM...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986744 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gmacrtcpageflip was...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-411862)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411862 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2contextsetnotify Syzbot reported BUG: KASAN: slab-use-after-free i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987152 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit Syzkaller reported BUG as...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986872 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211vifusereservedcontext, when we hav...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986487 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit Syzkaller reported BUG as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986273 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit Syzkaller reported BUG as...

SUSE CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type FTCH...

advisories

It is an advisory repository for undisclosed vulnerabilities. Th...

DEBIAN-CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

EUVD-2025-32513

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...