CVE-2023-54001 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

CVE-2023-54001

CVE-2023-54001 details are not provided in the connected documents; monitor for updates.

CVE-2023-54001 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

CVE-2022-50732: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211rx We cannot dereference the "skb" pointer after calling ieee80211monitorrx, because it is a use after free...

CVE-2025-12654

The CVE-2025-12654 entry applies to the WordPress WPvivid Backup & Migration plugin (Migration, Backup, Staging) version ≤ 0.9.120. The root cause is an insufficient restriction in check_filesystem_permissions(), which allows an authenticated attacker with Administrator-level access to create arb...

CVE-2025-12654: External Control of File Name or Path

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory creation in all versions up to, and including, 0.9.120. This is due to the checkfilesystempermissions function not properly restricting the directories that can be created, or in...

CVE-2025-68256 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser The Information Element IE parser rtwgetie trusted the length byte of each IE without validating that the IE body len bytes after the 2-byte header fits inside the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991176 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs Read/WriteMACREG callbacks are NULL so the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988952 advisory. In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out of zr36057init and create ne...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989387 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdmlterx The netifrxni function frees the skb so we can't...

Sensitive Information Exposure

com.liferay.portal, com.liferay.portal.kernel is vulnerable to Sensitive Information Exposure. The vulnerability is due to remote staging not properly obtaining the live site's remote address from the database, which allows remote authenticated users—who can obtain the staging server’s shared...

Kentico Xperience < 13.0.173 Auth Bypass

According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.173. It is, therefore, affected by an authentication bypass vulnerability via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication...

Kentico Xperience < 13.0.178 Multiple Vulnerabilities

According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.178. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync...

VulnCheck KEV: CVE-2025-2747

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects...

VulnCheck KEV: CVE-2025-2746

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects...

EUVD-2009-4335

Malware in sbrugna...

EUVD-2015-7223

Malware in sbrugna...

EUVD-2018-18546

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987162 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdmlterx The netifrxni function frees the skb so we can't...

CVE-2022-50513: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix a potential memory leak in rtwinitcmdpriv In rtwinitcmdpriv, if pcmdpriv-rspallocatedbuf is allocated in failure, then pcmdpriv-cmdallocatedbuf will be not properly released. Besides, considering there are...