CVE-2025-64528

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993204)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993204 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Prevent leaking grants Prior to this commit, if a grant mapping operation failed...

CVE-2025-64528

CVE-2025-64528 affects Discourse prior to versions 3.5.3, 2025.11.1, and 2025.12.0. An attacker who knows part of a username can discover the user and their full name via UI or API, even when enable_names is disabled. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, OpenVAS, etc...

EUVD-2025-205817

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

EUVD-2025-205696

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

CVE-2025-15103

CVE-2025-15103 affects Delta Electronics DVP-12SE11T PLC. Vulnerability: authentication bypass via partial password disclosure (root cause: partial/password disclosure enables bypass). Impact: high confidentiality, integrity, and availability risks; network-based. Remediation: firmware updates re...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992425 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the...

PT-2025-54189

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enable names is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

PT-2025-53857

Name of the Vulnerable Software and Affected Versions DVP-12SE11T affected versions not specified Description The DVP-12SE11T device suffers from an authentication bypass issue due to partial password disclosure. This allows unauthorized access. Recommendations At the moment, there is no...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992277)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992277 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Prevent leaking grants Prior to this commit, if a grant mapping operation failed...

Delta Electronics DVP-12SE11T 安全漏洞

Delta Electronics DVP-12SE11T is a networked mainframe computer from Delta Electronics China. A security vulnerability exists in the Delta Electronics DVP-12SE11T that stems from a partial password disclosure that could lead to authentication bypass...

Permissive List of Allowed Inputs

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Permissive List of Allowed Inputs in the Webhook Node's IP whitelist validation due to includes method performing partial string matching instead of exact IP comparison. An attacker can gain...

SUSE CVE-2022-50698

In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219registerdaiclks If clkhwregister fails, the corresponding clk should not be unregistered. To handle errors from loops, clean up partial iterations before doing the goto. So add a...

UBUNTU-CVE-2022-50698

In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219registerdaiclks If clkhwregister fails, the corresponding clk should not be unregistered. To handle errors from loops, clean up partial iterations before doing the goto. So add a...

CVE-2022-50698

CVE-2022-50698: Linux kernel ASoC da7219 clock handling fix. The vulnerability stemmed from an error path in da7219_register_dai_clks() where clk_hw_register() failures could lead to an improper clk unregister. The patch adds proper cleanup by unregistering the clock on error (clk_hw_unregister()...