963 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992733 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, ...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992552)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992552 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, ...
CLSA-2025-1766075810 sssd: Fix of CVE-2025-11561
CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...
curl: Heap Overflow in cURL AmigaOS Socket Implementation
Buffer Overflow in cURL AmigaOS Socket Implementation Report Metadata - Report ID: H1-CURL-AMIGAOS-001 - Report Title: Heap Buffer Overflow in Curlipv4resolver in AmigaOS Socket Backend - Component: /home/el-ha9/curl/lib/amigaos.c - Curlipv4resolver function - Affected Versions: All cURL versions...
CVE-2025-12966
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolveimportdirectory function in versions 4.5.4 to 4.5.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload...
CVE-2025-12966
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolveimportdirectory function in versions 4.5.4 to 4.5.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload...
CLSA-2025-1764028069 sssd: Fix of CVE-2025-11561
CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...
CVE-2025-13085 SiteSEO – SEO Simplified <= 1.3.2 - Insecure Direct Object Reference to Sensitive Post Meta Disclosure
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Improper Authorization leading to Sensitive Post Meta Disclosure in versions up to and including 1.3.2. This is due to missing object-level authorization checks in the resolvevariables AJAX handler. This makes it possible for...
CVE-2025-13085
CVE-2025-13085 affects SiteSEO – SEO Simplified for WordPress (versions
WordPress plugin SiteSEO 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...
EUVD-2025-179624
Malicious code in compile-catch-gamma-encode-resolve npm...
EUVD-2025-177627
Malicious code in new-alpha-transpile-air-resolve npm...
EUVD-2025-180121
Malicious code in bash-water-resolve-unix-error npm...
EUVD-2025-179699
Malicious code in cluster-protected-resolve-cloud-refactor npm...
Malicious code in root-resolve-wind-stub-interface (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177468
Malicious code in omega-test-benchmark-validate-resolve npm...
EUVD-2025-177267
Malicious code in permission-resolve-function-fast-try npm...
EUVD-2025-179592
Malicious code in container-bundle-wind-private-resolve npm...