7842 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390843)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390843 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfscreategroups When in allocated by kvzalloc fails,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987306)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987306 advisory. In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xascreaterange when multi-order entry present If there is already an entry present th...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987136)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987136 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987160 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5coredestroycq error path Prior to this patch in case...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986998)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986998 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986683)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986683 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. Tenable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986538)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986538 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...
XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
The vulnerability of the command-line interface (CLI) of the Cisco Unified Computing System Manager allows a malicious actor to gain read, modify, and create access to arbitrary files.
The vulnerability of the command-line interface CLI of the Cisco Unified Computing System UCS Manager relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to gain read, modify, and create arbitrary files...
SUSE CVE-2023-53568
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568
Vulnerability (CVE-2023-53568) in the Linux kernel affects s390/zcrypt: when dev_set_name() fails, zcdn_create() leaks newly allocated resources instead of freeing them. The issue has been resolved by ensuring proper cleanup. The provided description notes the root cause and fix, and linked refer...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
EUVD-2025-32200
Malicious code in bioql PyPI...
EUVD-2024-36708
Malicious code in bioql PyPI...
EUVD-2025-24864
Malicious code in bioql PyPI...