27440 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987459)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987459 advisory. When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987370)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987370 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fix integer overflow in ghesestatuspoolinit Change numghes from int to unsigned int,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-397160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-397160 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule...
CVE-2025-40646
Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...
CVE-2025-60967
creationtimestamp| type| source ---|---|--- 2025-10-06 18:01:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328526970680119...
CVE-2025-61687
creationtimestamp| type| source ---|---|--- 2025-10-06 17:14:05+00:00| seen| https://gist.github.com/Darkcrai86/78c3494a56050678df9c060ed3bd1f79...
CVE-2025-54291
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...
GHSA-JHPV-4Q4F-43G5
creationtimestamp| type| source ---|---|--- 2025-10-06 17:02:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328297904684807...
GHSA-G8C6-8FJJ-2R4M
creationtimestamp| type| source ---|---|--- 2025-10-06 16:19:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328125762428936...
GHSA-35G6-RRW3-V6XC
creationtimestamp| type| source ---|---|--- 2025-10-06 16:02:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328061935482403...
CVE-2025-59731
creationtimestamp| type| source ---|---|--- 2025-10-06 13:56:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115327565160692907...
CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow
A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
SUSE CVE-2023-53597
In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection. But we do not return the mi...
CVE-2023-53597
In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection. But we do not return the mi...
CVE-2023-53597 cifs: fix mid leak during reconnection after timeout threshold
In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection. But we do not return the mi...
EUVD-2025-32422
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...
EUVD-2025-32409
Not used...
EUVD-2025-32408
Not used...
