Linux Distros Unpatched Vulnerability : CVE-2023-54292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix data race on CQP request done KCSAN detects a data race on cqprequest-requestdone memory location which is accessed locklessly in irdmahandlecqp...

WordPress Cost Calculator Builder plugin <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions vulnerability

Authenticated Subscriber+ Missing Authorization via getccorders/updateorderstatus Functions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Cost Calculator Builder versions = 3.5.32...

WordPress plugin Custom Post Status 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress plugin Ultimate Post Kit Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

PT-2025-54281

Name of the Vulnerable Software and Affected Versions Page Carbajal Custom Post Status versions through 1.1.0 Description A Cross-Site Request Forgery CSRF issue exists in Page Carbajal Custom Post Status, which can also lead to Stored Cross-Site Scripting XSS. The issue impacts the Custom Post...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993093 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel wi...

CVE-2025-69257

creationtimestamp| type| source ---|---|--- 2025-12-30 22:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbag76nyee2x 2026-01-24 22:44:19+00:00| seen| https://gist.github.com/alon710/5f1f59b372627b43576ca003c1b2b010...

EUVD-2023-60392

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...

UBUNTU-CVE-2023-54280

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...

UBUNTU-CVE-2023-54249

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...

CVE-2023-54249

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...

CVE-2025-68982

creationtimestamp| type| source ---|---|--- 2025-12-30 12:36:20+00:00| seen| https://gist.github.com/Darkcrai86/86495298d345190451d457e608a9bed7 2025-12-31 04:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbaz4daqzn22...

CVE-2025-69014

creationtimestamp| type| source ---|---|--- 2025-12-30 12:27:24+00:00| seen| https://gist.github.com/Darkcrai86/75daabe1647a11b580b76ad9052c33a1...

CVE-2025-69019

creationtimestamp| type| source ---|---|--- 2025-12-30 12:25:44+00:00| seen| https://gist.github.com/Darkcrai86/c5f8a3ec286c4b26e48035f981659d15...

CVE-2025-69023

creationtimestamp| type| source ---|---|--- 2025-12-30 12:24:24+00:00| seen| https://gist.github.com/Darkcrai86/cdf60273638a3717e46d1db6b3fe1389...

CVE-2023-54280 cifs: fix potential race when tree connecting ipc

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...

CVE-2023-54280 cifs: fix potential race when tree connecting ipc

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...

CVE-2023-54256

Removed by vendor...

CVE-2023-54249

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...

CVE-2023-54249 bus: mhi: ep: Only send -ENOTCONN status if client driver is available

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...