73 matches found
CVE-2026-82915: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fixed a use-after-free issue when volume creation failed. There is a use-after-free problem related to ‘ebatbl’ in the error handling path of ubicreatevolume. c ubiebareplacetablevol, ebatbl vol-ebatbl = tbl...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ubi: Fixed an unreferenced object issue reported by kmemleak in ubiresizevolume. There is also a memory leak issue reported by kmemleak: An unreferenced object with a size of 0xffff888102007a00 size 128 is involved: - Command: co...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55195 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55195 Source advisory: OSV:PYSEC-2026-2972...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55206 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55206 Source advisory: OSV:PYSEC-2026-2973...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-23879 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55206 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55206 Source advisory: OSV:GHSA-H4GH-22QQ-72R7...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-55195 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-55195 Source advisory: OSV:GHSA-GJRG-MPP7-G774...
apat-frame (>=1.0.12, <=1.0.14), autotrain-advanced (>=0.7.64, <=0.8.25) +8 more potentially affected by CVE-2026-23879 via py7zr (0.21.0)
py7zr PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - apat-frame =1.0.12, =0.7.64, =0.10.0, =0.0.2, =0.0.5 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
SUSE CVE-2023-53800
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ================================================================== BUG: KASAN: use-after-free in ubiebacopytable+0x11f/0x1c...
EUVD-2023-60106
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ================================================================== BUG: KASAN: use-after-free in ubiebacopytable+0x11f/0x1c...
CVE-2023-53800
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ================================================================== BUG: KASAN: use-after-free in ubiebacopytable+0x11f/0x1c...
CVE-2023-53800
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ================================================================== BUG: KASAN: use-after-free in ubiebacopytable+0x11f/0x1c...
CVE-2023-53800
The CVE-2023-53800 issue is in the Linux kernel ubi driver (ubi_eba_copy_table/ubi_resize_volume). It describes a use-after-free when a volume resize fails: new_eba_tbl is freed on error, but vol->eba_tbl still holds it, creating a lifecycle mismatch that can cause a use-after-free on subseque...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988724 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...
EUVD-2007-2185
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986998)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986998 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free...
CVE-2025-8532
Authorization Bypass Through User-Controlled Key, CWE - 862 - Missing Authorization, – Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows – Exploitation of Trusted Identifiers, – Exploitation of Authorization, – Variable...
CVE-2025-8532
Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing. This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166...
CVE-2025-8532
The CVE-2025-8532 entry concerns Bimser Solution Software Trade Inc. EBA Document and Workflow Management System, affected versions 6.7.164 up to 6.7.165 (prior to 6.7.166). The issue is described as an Authorization Bypass Through User-Controlled Key (improper authorization) that enables forcefu...