410932 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tcl (UTSA-2026-054029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054029 advisory. In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of th...
RockyLinux 9 : golang (RLSA-2026:22121)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22121 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...
Linux Distros Unpatched Vulnerability : CVE-2026-79781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in ...
Ubuntu 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel vulnerabilities (USN-8661-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8661-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not...
Linux Distros Unpatched Vulnerability : CVE-2026-79674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended...
CentOS 9 : tar-1.34-13.el9
The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the tar-1.34-13.el9 build changelog. - A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection...
Linux Distros Unpatched Vulnerability : CVE-2026-79207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104792)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104792 advisory. Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...
Linux Distros Unpatched Vulnerability : CVE-2026-79223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098667)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098667 advisory. A flaw was found in the filelockinit in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number o...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-bad-free (UTSA-2026-104837)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104837 advisory. A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of th...
Linux Distros Unpatched Vulnerability : CVE-2026-80101
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line...
EUVD-2025-210784
An arbitrary file upload vulnerability in the /v1/mydrive/batchupload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file...
PT-2026-81982
Name of the Vulnerable Software and Affected Versions CAYIN CMS-WS affected versions not specified CAYIN CMS-SE affected versions not specified Description Missing authentication allows unauthenticated remote attackers to obtain media file lists through specific functionality, leading to partial...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093151)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093151 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...
PT-2026-82092
Name of the Vulnerable Software and Affected Versions RustDesk versions 1.3.9 through 1.4.9 Description A path traversal issue exists in the macOS clipboard file-paste code path. The application accepts file descriptor names provided by a peer and joins them to the target directory without...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-poi (UTSA-2026-093250)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093250 advisory. In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker...
PT-2026-82322
Name of the Vulnerable Software and Affected Versions yx-image-recognition version 1.0 Description The software is subject to Path Traversal, a condition where an attacker can access files and directories outside the intended folder. This occurs because the parameters dir and filePath are passed...
PT-2026-82051
Name of the Vulnerable Software and Affected Versions OpenRGB affected versions not specified Description The network protocol in OpenRGB contains a flaw that allows an attacker to write controlled strings into arbitrary file system paths. This issue can lead to a full system compromise if the...