CVE-2025-48078: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issue affects Slick Google Map: from n/a through = 0.3...

PT-2025-45198

Cross-Site Request Forgery CSRF vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issue affects Slick Google Map: from n/a through = 0.3...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990444 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

CVE-2025-12369

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989957 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more dat...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989357 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990027 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is 4, left shift overflows...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989734 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more dat...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989334 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990340 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989031 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on createrprocess and devicerelease Do not remove the map from th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989328 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: exynos: Fix refcount leak in exynosmappmu offindmatchingnode returns a node pointer with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989900 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit 2fd3fb0be1d1 kasan, vmalloc: unpoison...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988805 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989373 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990202 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correct...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989687 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: fix vsi-txqmap sizing The approach of having XDP queue per CPU regardless of user's setting...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989645)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989645 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null...

MGASA-2025-0256 Updated golang packages fix security vulnerabilities

Insufficient validation of bracketed IPv6 hostnames in net/url. CVE-2025-47912 Unbounded allocation when parsing GNU sparse map in archive/tar. CVE-2025-58183 Parsing DER payload can cause memory exhaustion in encoding/asn1. CVE-2025-58185 Lack of limit when parsing cookies can cause memory...

CVE-2025-12369

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...