Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003615 advisory. An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idralloc fails in genlregisterfamily in net/netlink/genetlink.c. Tenable...

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

ChurchCRM Security Breach

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v5.8.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the Family Name parameter under the Register a New...

PT-2024-27105

Name of the Vulnerable Software and Affected Versions Church CRM version 5.8.0 Description A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...

CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

PT-2023-19742

Name of the Vulnerable Software and Affected Versions ChurchCRM versions 4.5.3 and below Description A stored cross-site scripting XSS issue was found in the /api/public/register/family API endpoint. This could potentially allow attackers to inject malicious scripts into the application...

CVE-2023-24690: Improper Neutralization of Input During Web Page Generation

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

kernel: memory leak in genl_register_family() in net/netlink/genetlink.c

A flaw was found in the genlregisterfamily function in the Linux kernel. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability...

Linux kernel memory leak vulnerability (CNVD-2019-31647)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel versions prior to 5.0.6 have a memory leak vulnerability in net/netlink/genetlink.c when idralloc of genlregisterfamily fails. No details of the...