Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992316 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Have traceeventfile have ref counters The following can crash the kernel: cd...

CVE-2025-15197

creationtimestamp| type| source ---|---|--- 2025-12-29 19:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5kxzbnv52e...

CVE-2025-15168

creationtimestamp| type| source ---|---|--- 2025-12-29 04:52:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb423jiuv72c 2026-01-09 22:06:42+00:00| seen| Telegram/2tmB9X6H3Ti-myCGo7FZg0hXdrnaBtrok6C0Sug0L5hEs24...

CVE-2025-33212

creationtimestamp| type| source ---|---|--- 2025-12-27 20:36:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3maynwcxnnc2s 2026-01-09 23:07:04+00:00| seen| Telegram/3VMHuZJJpWuQDQD7W2QL9nIMLLhgimFT4vXEohZS6QkxBh0...

CVE-2024-30167

creationtimestamp| type| source ---|---|--- 2025-12-27 15:00:07+00:00| published-proof-of-concept| Telegram/jzwMWime8fhSscH30BIVAvpGgHaIHZPVce6IatouQmqqRA 2026-04-29 05:31:07+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmensmnki2g...

WordPress Event Organiser plugin <= 3.12.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin Event Organiser versions = 3.12.8...

CVE-2024-44065

creationtimestamp| type| source ---|---|--- 2025-12-26 18:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mavxa4idil2c...

CVE-2025-68944

creationtimestamp| type| source ---|---|--- 2025-12-26 05:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maujcw2oyg2o...

CVE-2025-68375

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intelpmudrainpebsicl is called to drain PEBS records, the perfeventoverflow could be called to process the last PEBS record. While perfeventoverflow could trigge...

CVE-2025-68578

creationtimestamp| type| source ---|---|--- 2025-12-25 10:53:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3masmetwapx2t...

SUSE CVE-2023-54152

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by moving j1939skerrqueue This commit addresses a deadlock situation that can occur in certain scenarios, such as when running data TP/ETP transfer and subscribing to the error queue while receiving a...

SUSE CVE-2025-67725

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation...

SUSE CVE-2025-68370

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUXEVENT of each CPU and is required in perf mode. It has been added to the coresightpath so that dependent devices can access it...

SUSE CVE-2025-68375

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intelpmudrainpebsicl is called to drain PEBS records, the perfeventoverflow could be called to process the last PEBS record. While perfeventoverflow could trigge...

ChurchCRM Event Participant Editor SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the event participant editor. An attacker can exploit the vulnerability to cause a full database disclosure and...

CVE-2025-68917

creationtimestamp| type| source ---|---|--- 2025-12-24 22:32:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marcxu3zgp2r...

EUVD-2025-205344

Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounts. Attackers can exploit the missing control check by sending crafted POST requests to create administrative account...

CVE-2019-25245

creationtimestamp| type| source ---|---|--- 2025-12-24 19:37:01+00:00| seen| https://bsky.app/profile/potato.software/post/3maqz6fa6iw24 2025-12-24 20:26:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3xpbzcp2p 2025-12-24 20:27:01+00:00| seen|...

EUVD-2022-55819

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afuioctl eventfdctxput need to be called to put the refcount that gotten by eventfdctxfdget when ocxlirqsethandler fails...

CVE-2025-68742

creationtimestamp| type| source ---|---|--- 2025-12-24 15:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maqjquyax42r 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...