603 matches found
Astra Linux – Vulnerability in Xen
A issue was discovered in Xen versions 4.9 through 4.14.x. On the ARM architecture, a guest can control whether memory accesses bypass the cache. This means that Xen needs to ensure that all writes such as those during scrubbing have reached the memory before handing over the page to the guest...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022374)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022374 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.29 and prior. Easily exploitable...
EUVD-2026-62030
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
GHSA-4R9R-4425-74P7 Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities
Summary CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. Under certain circumstances, it could lead to incorrect equality comparisons. Impact EntityIdentifier.equals has inverted null/self branches The...
CVE-2026-3506
The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...
EUVD-2025-206692
YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...
MiracleLinux 8 : libreswan-4.9-3.el8 (AXSA:2023-6143:08)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6143:08 advisory. libreswan: Regression of CVE-2023-30570 fixes in the MIRACLE LINUX CVE-2023-2295 Tenable has extracted the preceding description block directly from the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003436)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003436 advisory. drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIGVMAPSTACK option, which allows...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003543)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003543 advisory. Linux kernel versions 4.9+ can be forced to make very expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet which can lead to a denia...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003162)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003162 advisory. In /drivers/isdn/i4l/isdnnet.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002536)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002536 advisory. kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003012)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003012 advisory. drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial o...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002904)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002904 advisory. The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service duplicate freelist...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001207)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001207 advisory. drivers/char/virtioconsole.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to...
CVE-2018-1000141
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000403)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000403 advisory. The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after- free because skcd-norefcnt was not considered during a...
EUVD-2018-14500
Malware in sbrugna...
EUVD-2017-1961
Malware in sbrugna...