Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked krealloc return value in the ext4fcrecordregions function, which could lead to a memory leak...

PT-2025-41199

Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress versions prior to 11.13.3.0 Description An administrative user can inject JavaScript or other content into the Annual Report Enterprise Banner image upload field. This injected content is executed when other users generate an...

PT-2025-41198

Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress versions prior to 11.13.3.0 Description An administrative user can inject JavaScript or other content into the Annual Report Template. This injected content is executed when other users generate an Annual Report. Successful...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986580)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986580 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougarreportfixup reportfixup for the Cougar 500k...

Gathers structured vuln data from plugins that fork

This plugin generates internal host tags for vulnerability data from plugins that fork. It queries scratchpad tables, aggregates the vulnerability data by plugin ID, port and protocol, then attaches the data to the scan as internal host tags. This plugin does not create a scan vulnerability repor...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-382803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382803 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986433 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the devi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-409873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409873 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-411373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411373 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhostscsigetreq Since commit 3f8ca2e115e5 vhost/scsi: Extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-406106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-406106 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacrubind Syzbot is still reporting quite an old issu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986668 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987102 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix stack-out-of-bounds memory access from ioapicwriteindirect KASAN reports the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987024 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed runni...

(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportRunPatch class. The issue results from the lack of proper validation of a...

(0Day) Ivanti Endpoint Manager MP_Report_Run2 SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the MPReportRun2 class. The issue results from the lack of proper validation of a...

Hospital-Management-System SQL注入漏洞

Hospital-Management-System is a hospital management system by Karthik Individual Developer. Hospital-Management-System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ai in the file /delete.php, which could lead to a SQL injection attack...

UBUNTU-CVE-2023-53616

In the Linux kernel, the following vulnerability has been resolved: jfs: fix invalid free of JFSIPipimap-iimap in diUnmount syzbot found an invalid-free in diUnmount: BUG: KASAN: double-free in slabfree mm/slub.c:3661 inline BUG: KASAN: double-free in kmemcachefree+0x71/0x110 mm/slub.c:3674 Free ...

CVE-2023-53587 ring-buffer: Sync IRQ works before buffer destruction

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just before destruction, it may be possible maybe not in a real system, but it did happen in ARCH=um with time-travel to destroy the...

CVE-2023-53587 ring-buffer: Sync IRQ works before buffer destruction

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just before destruction, it may be possible maybe not in a real system, but it did happen in ARCH=um with time-travel to destroy the...

CVE-2023-53564 ocfs2: fix defrag path triggering jbd2 ASSERT

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2ioctlmoveextents ocfs2moveextents ocfs2defragextent ocfs2moveextent + ocfs2journalaccessdi + ocfs2splitextent //sub-paths call jbd2journalrestart + ocfs2journaldirty...