CVE-2025-64502

Parse Server vulnerability CVE-2025-64502 arises from public explain() queries being allowed before the 8.5.0-alpha.5 release. The MongoDB Explain() output can reveal database schema, field names, index configurations, query optimization details, and execution statistics, which could aid targeted...

EUVD-2025-41929

Malicious code in surya-brongkos49-sluey npm...

EUVD-2025-40951

Malicious code in tiara-gembus69-miaww npm...

EUVD-2025-41059

Malicious code in fauzi-donat87-riris npm...

SUSE SLED15: libopenjpeg1 / libopenjpeg1-32bit / openjpeg / openjpeg-devel / etc (SUSE-SU-2025:3946-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3946-1 advisory. - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990389 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implemen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990515 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is 4, left shift overflows...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990395)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990395 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5adddisks There's a KASAN warning in raid5adddisk when running...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990557 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990552 advisory. In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovlcreatereal Syzbot triggered the following warning in ovlworkdircreate -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990465 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990618 advisory. In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990474 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap Limit max values for vht mcs and...

CVE-2025-64106

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the...

SUSE-SU-2025:3946-1 Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal bsc1227410. Other bug fixes: - Ensure no bundled libraries are used bsc1250467...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989859)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989859 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexconfigscan Replace one-element...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989604 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990320 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep The ilitek-ili9881c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990219)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990219 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexconfigscan Replace one-element...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989345 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep The ilitek-ili9881c...