Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986561 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the...

EUVD-2024-19757

Malicious code in bioql PyPI...

EUVD-2025-5493

Malicious code in bioql PyPI...

EUVD-2024-43732

Malicious code in bioql PyPI...

EUVD-2023-54648

Malicious code in bioql PyPI...

EUVD-2023-36193

Malicious code in bioql PyPI...

EUVD-2023-57421

Malicious code in bioql PyPI...

EUVD-2023-58771

Malicious code in bioql PyPI...

Apple Security Update: tvOS 26.0.1

Apple recommends to install security update tvOS 26.0.1 on devices Apple TV HD and Apple TV 4K all models...

CVE-2025-47421

CVE-2025-47421 affects CRESTRON TOUCHSCREENS x70 (versions 3.001.0031.001 through 3.001.0034.001). The issue is an improper neutralization of argument delimiters in a command, enabling argument injection via a specially crafted SCP command over SSH that can grant a privileged operating system ses...

CVE-2025-38056

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hdagenericmachineselect appends -idisp to the tplg filename by allocating a new string with devmkasprintf, then stores the string right back into the global variable...

Malicious code in @hd-base/atoms (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-22161

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11...

CVE-2024-48214

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

CVE-2024-49689

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

CVE-2024-46960

The ASD com.rocks.video.downloader aka HD Video Downloader All Format application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloader.MainBrowserActivity component...

CVE-2023-5081

An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier...

CVE-2021-24571

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues...

CVE-2021-45043

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

CVE-2012-10011

A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by this issue is the function hdaddmedia/hdupdatemedia of the file functions.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely...