Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100585 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100574)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100574 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfatfinddirentry In exfatfinddirentry, the bufferhead...

Linux Distros Unpatched Vulnerability : CVE-2026-19970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file...

PT-2026-76827

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting occurs due to improper handling of the course argument within the '/BSCE2.php' endpoint. Cross site scripting is a technique where malicious...

PT-2026-76884

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description A remote issue exists in the /customer/account/rma/store file. Manipulation of the rma qty, resolution type, or rma reason id arguments allows for the enforcement of a behavioral workflow...

ROS-20260817-73-0031

The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

PT-2026-73184

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

PT-2026-73221

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

PT-2026-73204

Name of the Vulnerable Software and Affected Versions Adblock for Youtube Extension versions prior to 7.2.2 Description An improper authorization issue exists in the Event Listener component within the contentscript.js file. The flaw occurs in the updateDynamicRules function when the...

PT-2026-76881

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the...

PT-2026-73220

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 17c12da Description A buffer overflow can be triggered remotely via the manipulation of the transmatrix count/pcBoneTransforms argument within the Assimp::MDLImporter::ParseBoneTrafoKeys 3DGS MDL7...

PT-2026-76766

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A flaw in the /admin/get barcode data.php endpoint allows for remote SQL injection. This occurs through the manipulation of the barcode variable, which can be exploited to...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099478 advisory. Unity Link Advisory UTSA-2026-099478 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099469 advisory. A vulnerability was found in GNU Binutils 2.45. Affected is the function elflinkaddobjectsymbols of the file bfd/elflink.c of the component Linker. The manipulation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100557 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the...

PT-2026-73328

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

PT-2026-73352

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

CVE-2026-19964 Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection

A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jijmcp/pythonrepr.py of the component jmcheck. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2026-19964

The CVE-2026-19964 entry concerns Jij-Inc Jij-MCP-Server 0.1.0. It affects the PythonREPL.run function in jij_mcp/python_repr.py (component jm_check). The manipulation of the argument code leads to code injection, with remote exploit potential. The vulnerability has been publicly disclosed, and a...