9345 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986998)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986998 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-390843)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-390843 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfscreategroups When in allocated by kvzalloc fails,...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
Cisco Unified Computing System Manager Privilege Escalation
The vulnerability of the command-line interface CLI of the Cisco Unified Computing System UCS Manager relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to gain read, modify, and create arbitrary files...
SUSE CVE-2023-53568
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568
Vulnerability (CVE-2023-53568) in the Linux kernel affects s390/zcrypt: when dev_set_name() fails, zcdn_create() leaks newly allocated resources instead of freeing them. The issue has been resolved by ensuring proper cleanup. The provided description notes the root cause and fix, and linked refer...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
EUVD-2024-47535
Malicious code in bioql PyPI...
EUVD-2025-11494
Malicious code in bioql PyPI...
EUVD-2025-6733
Malicious code in bioql PyPI...
EUVD-2024-49632
Malicious code in bioql PyPI...
EUVD-2025-29189
Malicious code in bioql PyPI...
EUVD-2024-31047
Malicious code in bioql PyPI...
EUVD-2025-30342
Malicious code in bioql PyPI...
EUVD-2024-17445
Malicious code in bioql PyPI...