13842 matches found
Linux kernel 安全漏洞
The Linux kernel is the core used by the open-source operating system Linux developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of mutual exclusion locks in the regulator operations within the pmbus core,...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-013125)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013125 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdxraid1 thread when raid1 array run failed fail run raid1 array when we assemble...
We Are Currently Clean on OPSEC: Why JD Can't Encrypt
We analyse the 2025 Signalgate leak of sensitive US military information by the Trump administration, addressing why confidentiality was violated messages leaked to the press in spite of encryption Signal, to deepen the socio-technical considerations when designing and deploying encryption. First...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011197)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011197 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013333)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013333 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007054)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007054 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013145 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix pollinterval handling and races on remove Before this patch...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011125)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011125 advisory. In the Linux kernel, the following vulnerability has been resolved: coresight: cti: Fix hang in ctidisablehw ctienablehw and ctidisablehw are called from an atomic...
Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-011280)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011280 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006926)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006926 advisory. In the Linux kernel, the following vulnerability has been resolved: coresight: cti: Fix hang in ctidisablehw ctienablehw and ctidisablehw are called from an atomic...
CVE-2026-40321
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased ...
Making opportunistic cyberattacks harder by design
This is part of a series of blogs and interviews conducted with our Microsoft Deputy CISOs , in which we surface a number of mission-critical security recommendations and best practices that businesses can enact right now and derive real meaningful benefits from. In this article, Ilya Grebnov,...
Ubuntu 24.04 LTS / 25.10 : Linux kernel (GCP) vulnerabilities (USN-8183-1)
"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8183-1 advisory. Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify...
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to insufficient protection of registration data, allowing a intruder to gain unauthorized access to protected information.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...
CVE-2026-40321 DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased ...
CVE-2026-40321
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased ...
EUVD-2026-22837
It has been identified that a vulnerability CWE-427 exists in the UPS Uninterruptible Power Supply management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007218)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007218 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: fix reference leak when pmruntimegetsync fails The PM reference count is not expected ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007622)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007622 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f PCI/ASP...
