49388 matches found
PT-2025-49382
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the sctp transport update rto function that may lead to a shift-out-of-bounds condition. This issue was identified by syzbot, which reported a potenti...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990387)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990387 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990427)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990427 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The rxstatus-rskeyix...
CVE-2025-12469
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.4.1. This is due to the plugin not properly verifying that a user is authorized to perform administrativ...
CVE-2025-11917 WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematicotestfeed function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...
CVE-2025-11917 WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematicotestfeed function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...
CVE-2025-11917
The CVE-2025-11917 entry concerns the WordPress WPeMatico RSS Feed Fetcher plugin. A Server-Side Request Forgery (SSRF) flaw exists in versions up to and including 2.8.11, exploitable via the wpematico_test_feed() function. Authenticated attackers with Subscriber-level access or higher can cause ...
[SECURITY] Fedora 43 Update: python-starlette-0.49.1-1.fc43
Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...
D-Link DNS-343 ShareCenter Command Execution Vulnerability
The D-Link DNS-343 ShareCenter is a network storage device from China's AUO D-Link. The D-Link DNS-343 ShareCenter suffers from a command execution vulnerability that stems from insufficient input validation in the Mail Test feature, which can be exploited by an attacker to execute arbitrary...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989272)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989272 advisory. In the Linux kernel, the following vulnerability has been resolved: locking/wwmutex/test: Fix potential workqueue corruption In some cases running with the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989586)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989586 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990049)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990049 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989811)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989811 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ttybuffer: Fix the softlockup issue in flushtoldisc When running ltp...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990174 advisory. In the Linux kernel, the following vulnerability has been resolved: locking/wwmutex/test: Fix potential workqueue corruption In some cases running with the...
WordPress plugin WPeMatico RSS Feed Fetcher: Code issues and vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989337)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989337 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989490)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989490 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988788)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988788 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989049)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989049 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd testgenkprobecmd only free buf in...
