CVE-2025-48065 Combodo iTop vulnerable to reflected XSS via objection edition form error

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

NVIDIA Triton Inference Server Access Control DoS

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to access control errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures...

Red Database Heap Buffer Overflow DoS

The vulnerability of the AggTraceMemoryFile::updateVersion function in the AggTraceSharedMemory.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

Linux NVME Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Red Database Synchronization Failure

The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990469 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990606 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the dotask function in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a perpetrator to cause service failures...

MGASA-2025-0261 Updated libsoup3 & libsoup packages fix security vulnerabilities

Libsoup: heap buffer over-read in skipinsignificantspace when sniffing content. CVE-2025-2784 Libsoup: denial of service attack to websocket server. CVE-2025-32049 Libsoup: integer overflow in appendparamquoted. CVE-2025-32050 Libsoup: segmentation fault when parsing malformed data uri...

Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC...

ROS-20251105-08

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

ROS-20251105-11

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988798 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the iowork loop when we s...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990126 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989784 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989339 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to use a PLT entry to call an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989178 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989070 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990053 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset...