35473 matches found
[SECURITY] Fedora 42 Update: kf5-akonadi-server-23.08.5-11.fc42
PIM Storage Service...
CVE-2025-11207: Improper Protection of Physical Side Channels
Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...
django-leaflet-storage (0.8.0b0), django-mercadopago-simple (2.1.0) +1 more potentially affected by CVE-2025-64459 via django (1.8.5)
django PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-leaflet-storage 0.8.0b0 - django-mercadopago-simple 2.1.0 - teamvault =0.5.0, =0.5.1 Source cves: CVE-2025-64459 Source advisory:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989441)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989441 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990165 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fcexchabtsresp fcexchreleaseep will decrease the ep's referenc...
PT-2025-45877
Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-27585)
Dell Unity is a mid-range storage solution from Dell that supports file storage, block storage, and a variety of data services features designed to meet the needs of organizations for flexibility, cost-effectiveness, and simplicity. Dell Unity suffers from an operating system command injection...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-27583)
Dell Unity is a mid-range storage solution from Dell that supports file storage, block storage, and a variety of data services features designed to meet the needs of organizations for flexibility, cost-effectiveness, and simplicity. Dell Unity suffers from an operating system command injection...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989524)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989524 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags In nvmeallocadmintags, the adminq...
CVE-2025-46366: Plaintext Storage of a Password
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information...
CVE-2025-54329
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message including an SMS...
Inside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users
70 TB+ of data, hard-coded keys, and weak IAM controls. For even the most experienced enterprises, one configuration decision can be enough to surface how interdependent and vulnerable modern cloud systems truly are. The recent data exposure incident at a large automotive firm highlights this...
CLSA-2025-1762180294 podman: Fix of CVE-2024-9676
CVE-2024-9676: fix symlink traversal vulnerability in containers/storage library to prevent hanging and denial of service when running malicious images via automatically assigned user namespace...
CVE-2025-11193: Plaintext Storage of a Password
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information...
[SECURITY] Fedora 42 Update: openbao-2.4.3-1.fc42
Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...
Storage Component Code Execution
The vulnerability of the Storage component in Google Chrome and Microsoft Edge relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
CVE-2020-36863
Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce storage outside of the webroot, and the web server permitted execution within the upload directory. An...
Stellar Toolkit for Outlook Review: Simplify and Optimize PST/OST File Management
Are you experiencing performance issues with your Outlook data PST and OST in the Outlook environment? Common problems…...
Chromium: CVE-2025-12434 Race in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...