Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002323 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-0049

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0049

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0049

A critical vulnerability exists in the Android Framework (specifically libdng_sdk.so) caused by an unsigned integer overflow in dng_opcode_MapTable::ProcessArea within dng_misc_opcodes.cpp:388. This occurs when calculating fAreaSpec.Plane() + fAreaSpec.Planes(). The overflow triggers an abort() c...

CVE-2026-0049

creationtimestamp| type| source ---|---|--- 2026-04-06 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0399/ 2026-04-08 14:21:04+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3miyii2rd5w2x 2026-04-09 01:18:15+00:00| seen|...

Fedora: Security Advisory (FEDORA-2026-334414b5e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ECHO-F535-0049-4D66

Bulletin has no description...

MiracleLinux 7 : vim-7.4.629-8.0.1.el7.AXS7 (AXSA:2024-8627:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8627:01 advisory. CVE-2023-0054: check the return value of vimregsub CVE-2023-0049: avoid going over the NUL at the end CVE-2023-0288: prevent the cursor from moving ...

EUVD-2026-0049

A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2020-0049

In onReadBuffer of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID...

CVE-2025-0049

When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0...

CVE-2025-0049

When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0...

CVE-2025-0049 Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0

When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0...

CVE-2025-0049 Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0

When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0...

Linux Distros Unpatched Vulnerability : CVE-2023-0049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 Note that Nessus relies on the presence of the package as reported by the vendo...

CLSA-2025-1737993483 vim: Fix of CVE-2023-0049

CVE-2023-0049: fix invalid memory access with bad 'statusline' value...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-2300)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Bindutils PHSA-2020-3.0-0049

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Flannel PHSA-2023-5.0-0049

An update of the flannel package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Redis PHSA-2023-5.0-0049

An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...