Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990315 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989284 advisory. In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpiinstallfixedeventhandler...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990104 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvcfunctionsetup permit...

Simple Online Hotel Reservation System Code Issue Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System has a code issue vulnerability that stems from a lack of valid validation of uploaded files by the Photo Handler component in file /admin/editroom.php. An attacker can use th...

CVE-2025-12623

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

CVE-2025-12070

The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing nonce validation on the ViaAdspluginHandler function. This makes it possible for unauthenticated attackers to modify the plugin's API key and cookie...

CVE-2025-12623

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this issue is some unknown functionality of the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java of the component Authentication Toke...

CVE-2025-12593

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, jitsucom-bulker, docker-machine-driver-linode, scorecard, terraform-provider-kubernetes, kube-bench, sriov-network-device-plugin, docker-credential-gcr, spire-controller-manager, nodetaint, envconsul, stakater-reloader,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: openbao-k8s, glow, pguser, kubernetes-dashboard-web, newrelic-nri-statsd, rancher-helm, custom-pod-autoscaler-operator, restic, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, protoc-gen-go, scorecard, azure-ipam, direnv,...

EUVD-2025-37439

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593 code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593

CVE-2025-12593 affects code-projects Simple Online Hotel Reservation System 2.0. The Photo Handler component, via /admin/edit_room.php, lacks validation for uploaded files, enabling unrestricted file uploads. Exploitation is possible remotely and a public exploit exists. Connected sources do not ...

CVE-2025-12593 code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...