25190 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-50839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: fix potential buffer head reference count leak As in 'jbd2fcwaitbufs' if buffer isn't uptodate, will return -EIO without update 'journal-jfcoff'. But...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992975 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not allow CHAINID to refer to another table When doing lookups for chains...
WordPress Return Refund and Exchange For WooCommerce plugin <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Refund Request Cancellation vulnerability discovered by Powpy in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.5.5...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993292)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993292 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in offlashprobeversatile offindmatchingnodeandmatch returns a node...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992988)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992988 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platformgetresource It will cause null-ptr-deref ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993187)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993187 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omapdssinitof omapdssfinddssofnode calls offindcompatiblenode t...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992881)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992881 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pciregisterhostbridge If deviceregister fails, call putdevice to give ...
Linux Distros Unpatched Vulnerability : CVE-2022-50855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992703)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992703 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992936)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992936 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvbunregisterdevice is known that prone to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992911)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992911 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure On error situation...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993199)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993199 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref-proc caused by race condition A transaction of type BINDERTYPEWEAKHANDLE c...
EUVD-2025-205836
A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...
EUVD-2023-60454
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential corruption when moving a directory F2FS has the same issue in ext4rename causing crash revealed by xfstests/generic/707. See also commit 0813299c586b "ext4: Fix possible corruption when moving a directory"...
EUVD-2022-55843
In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm program after failed attach In 0, we added the ability to bpfprogattach LSM programs to cgroups, but in our validation to make sure the prog is meant to be attached to BPFLSMCGROUP, we return too early if...
EUVD-2022-55864
In the Linux kernel, the following vulnerability has been resolved: nfc: Fix potential resource leaks nfcgetdevice take reference for the device, add missing nfcputdevice to release it when not need anymore. Also fix the style warnning by use error EOPNOTSUPP instead of ENOTSUPP...
EUVD-2022-55859
In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential buffer head reference count leak As in 'jbd2fcwaitbufs' if buffer isn't uptodate, will return -EIO without update 'journal-jfcoff'. But 'jbd2fcreleasebufs' will release buffer head from ‘jfcoff - 1’ if 'bh' is...
EUVD-2022-55863
In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer head in fcdoonepass In fcdoonepass miss release buffer head after use which will lead to reference count leak...
CVE-2025-15251
The CVE-2025-15251 entry describes a vulnerability in beecue FastBee (SIP Message Handler) up to version 2.1. The issue is in getRootElement (springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java) and manifests as an XML External Entity (XXE) refer...
