408973 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-61555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093151)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093151 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer-plugins-good (UTSA-2026-093155)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093155 advisory. The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hivex (UTSA-2026-093175)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093175 advisory. A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093153)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093153 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink...
PT-2026-81983
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
PT-2026-82115
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the L2TP module when userspace closes /proc/net/pppol2tp or /sys/kernel/debug/l2tp/tunnels before reaching the end-of-file. The iteration state,...
PT-2026-81951
Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.16.1 Fusion Builder versions prior to 3.16.1 Description An unauthenticated attacker can achieve remote code execution and complete site compromise by writing attacker-controlled PHP files to the server. This is...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093148)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093148 advisory. A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUS...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104790)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104790 advisory. Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104787)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104787 advisory. ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...
PT-2026-82321
Name of the Vulnerable Software and Affected Versions tamguo version 1.5.3 Description An unrestricted file upload issue allows for stored Cross-Site Scripting XSS, a technique where malicious scripts are permanently stored on the target server. The '/uploadFile' and '/imgUpload' endpoints within...
PT-2026-82218
Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The browser-items API does not restrict accepted paths to the project directory. Specifically, the BrowserItemResource in mage ai/api/resources/BrowserItemResource.py passes caller-supplied...
PT-2026-82319
Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file read issue exists in the 'downloadDocEx' interface located in src/com/DocSystem/controller/DocController.java. This allows an attacker to read files from the system that they should n...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75328
DocSys-master V2.02.85 is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The vulnerability is reachable over the network with no authentication required , yielding a CVSS 3.1 score of 7.5 (HIGH) with high...
CVE-2026-75331
tamguo 1.5.3 is affected by an Unrestricted File Upload vulnerability that leads to Stored XSS . The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java lack file type validation, allowing authenticated attackers to upload arbitrary HTML or JavaScript file...