SUSE CVE-2023-54271

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkgpolicydata being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:rawspinlock+0x17/0x30...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993006 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Check the size of screen before memsetio In the function arkfbsetpar, the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993185 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memsetio In the function s3fbsetpar, the valu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993000 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vt8623fb: Check the size of screen before memsetio In the function vt8623fbsetpar,...

WordPress plugin Curator.Io 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

PT-2025-54360

Cross-Site Request Forgery CSRF vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0...

PT-2025-54323

Name of the Vulnerable Software and Affected Versions Curator.Io versions through 1.9.5 Description A flaw exists in Curator.Io that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could potentially all...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992901 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL ptregs powerpc sets up PFKTHREAD and PFIOWORKER...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992766 advisory. In the Linux kernel, the following vulnerability has been resolved: gadgetfs: epio - wait until IRQ finishes after usbepqueue if waitforcompletioninterruptible is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992764 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992804 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of seio context in nfcgenlseio The callback context for sending/receiving...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992828 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Allow waiting for commands to complete on removed device When a SCSI device is removed...

CVE-2025-66103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: from n/a through = 0.9.5.9...

EUVD-2025-205806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Revmakx WPCal.Io allows DOM-Based XSS.This issue affects WPCal.Io: from n/a through 0.9.5.9...

CVE-2025-66103

CVE-2025-66103 corresponds to a vulnerability in WPCal.io (as reported by Wordfence) affecting version up to 0.9.5.9, described as an Authenticated (Contributor+) Stored Cross-Site Scripting via the events_list_grouped shortcode and patched. The initial description also mentions a DOM-based XSS i...

EUVD-2023-60489

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: perform null check on iov before dereferencing iov Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null...

EUVD-2023-60370

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkgpolicydata being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:rawspinlock+0x17/0x30...

CVE-2023-54315

CVE-2023-54315 affects the Linux kernel on the PowerPC platform, where a null pointer dereference could occur in the PCI SR-IOV path. The root cause was dereferencing iov before validating it, i.e., accessing iov->num_vfs without ensuring iov is non-NULL. The fixed patch moves the null check b...

CVE-2023-54242 block, bfq: Fix division by zero error on zero wsum

In the Linux kernel, the following vulnerability has been resolved: block, bfq: Fix division by zero error on zero wsum When the weighted sum is zero the calculation of limit causes a division by zero error. Fix this by continuing to the next level. This was discovered by running as root: stress-...

CVE-2023-54242

CVE-2023-54242 affects the Linux kernel in the block bfq I/O elevator. The issue is a division by zero when the weighted sum (wsum) equals zero, causing an invalid calculation of the limit during bfq_limit_depth. The vulnerability could trigger a divide error as observed in a stress-ng stress tes...