15715 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414353)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414353 advisory. A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks.L2 can carry out Spectre v2 attacks on L1 due to L1 thinking ...
CVE-2025-10696
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
Android Automotive OS Update Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-10-05 or later from the October 2025 Android Security Bulletin in addition to all issues in thi...
Wear OS Security Bulletin—October2025Stay organized with collectionsSave and categorize content based on your preferences.
The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2025-10-05 or later from the October 2025 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...
Android Security Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.
This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2025-10-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...
CVE-2025-9854
The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
PT-2025-40623
Name of the Vulnerable Software and Affected Versions The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress versions prior to 27.0.3 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of...
CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
EUVD-2024-49372
Malicious code in bioql PyPI...
EUVD-2024-34263
Malicious code in bioql PyPI...
EUVD-2025-10485
Malicious code in bioql PyPI...
EUVD-2025-19387
Malicious code in bioql PyPI...
EUVD-2024-51614
Malicious code in bioql PyPI...
EUVD-2023-58725
Malicious code in bioql PyPI...
EUVD-2022-29330
Malicious code in bioql PyPI...
EUVD-2025-27025
Malicious code in bioql PyPI...
EUVD-2025-21813
Malicious code in bioql PyPI...
EUVD-2024-44331
Malicious code in bioql PyPI...