WordPress plugin Social Reviews Recommendations 跨站脚本漏洞

...

PT-2025-49866

Name of the Vulnerable Software and Affected Versions Social Reviews & Recommendations plugin for WordPress versions prior to 2.6 Description The Social Reviews & Recommendations plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989579 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0...

PT-2025-49060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The extent map cache in the Linux kernel’s OCFS2 file system can become outdated when extents are moved or defragmented. This occurs because the cache is not invalidated after these...

EUVD-2021-1960

Malware in sbrugna...

EUVD-2021-1210

Malware in sbrugna...

EUVD-2015-5444

Malware in sbrugna...

EUVD-2021-1281

Malware in sbrugna...

EUVD-2025-14117

Malicious code in bioql PyPI...

EUVD-2024-52180

Malicious code in bioql PyPI...

Oracle Linux 9 : kernel (ELSA-2025-15740)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15740 advisory. - ipv6: mcast: Delay put pmc-idev in mlddeldelrec CKI Backport Bot RHEL-111149 CVE-2025-38550 - posix-cpu-timers: fix race between handleposixcputimers and...

jfs: Fix null-ptr-deref in jfs_ioc_trim

...

Linux Distros Unpatched Vulnerability : CVE-2021-33623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

Linux Distros Unpatched Vulnerability : CVE-2023-23612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider IdP when the...

Linux Distros Unpatched Vulnerability : CVE-2025-38203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN:...

Linux Distros Unpatched Vulnerability : CVE-2023-52655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap...

SUSE CVE-2025-38203

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...

DEBIAN-CVE-2025-38203

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...

UBUNTU-CVE-2025-38203

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...

PT-2025-27978

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.0-rc6 Description: A concurrency bug in the fs/jfs module results in a null pointer dereference. The issue is closely related to a previously fixed problem, but the accepted patch is still susceptible to a...