CVE-2025-67082

An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database...

EUVD-2026-3096

Malicious code in s3-cache-handler npm...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001080 advisory. Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attacke...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000541 advisory. Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attacker...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003699 advisory. In the hidpprocessreport in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003842 advisory. A memory leak in the cryptoreport function in crypto/cryptouserbase.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001360 advisory. In the hidpprocessreport in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001235 advisory. The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of servi...

MiracleLinux 4 : samba-3.6.23-41.AXS4 (AXSA:2017-1375:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1375:01 advisory. Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003905 advisory. A memory leak in the cryptoreport function in crypto/cryptouserbase.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001279 advisory. The cp2112gpiodirectioninput function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-lengt...

CVE-2025-68675

creationtimestamp| type| source ---|---|--- 2026-01-15 20:48:20+00:00| seen| https://seclists.org/oss-sec/2026/q1/71 2026-01-15 22:18:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mcimgxdhgg2e 2026-01-16 11:44:44+00:00| seen|...

CVE-2021-47765

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to...

CVE-2025-67082

An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database...

WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme North versions = 5.7.5...

EUVD-2026-2828

Not used...

OSV-2026-57 Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475261418 Crash type: Heap-buffer-overflow READ 1 Crash state: mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::ParseTrackEntry...

OSV-2026-54 Heap-use-after-free in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475563464 Crash type: Heap-use-after-free READ 8 Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3b...

OSV-2026-49 Heap-buffer-overflow in check_sync_pes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475305126 Crash type: Heap-buffer-overflow READ Crash state: checksyncpes Demux demuxprocessstream...

CVE-2025-67082

An SQL injection vulnerability exists in InvoicePlane versions through 1.6.3 . The flaw is located in the maxQuantity and minQuantity parameters used during report generation. Due to insufficient sanitization of single quotes , an authenticated attacker can perform an error-based SQL injection to...