Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104755 advisory. Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libproxy (UTSA-2026-093161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093161 advisory. url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:22112)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093153 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093616 advisory. a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled Th...

Linux Distros Unpatched Vulnerability : CVE-2026-34967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. A...

RockyLinux 10 : golang (RLSA-2026:22120)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: file-roller (UTSA-2026-030639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030639 advisory. fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a...

PT-2026-82322

Name of the Vulnerable Software and Affected Versions yx-image-recognition version 1.0 Description The software is subject to Path Traversal, a condition where an attacker can access files and directories outside the intended folder. This occurs because the parameters dir and filePath are passed...

EUVD-2026-66701

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...

CVE-2026-75327

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...

CVE-2025-61165

Cohere North AI v1.1.5 contains an arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component that allows unauthenticated remote attackers to achieve arbitrary code execution by uploading a crafted file. The CNA-assigned CVSS v3.1 score is 9.8 (Critical) (AV:N/AC:L/PR:N/UI:N/S...

PT-2026-82113

Name of the Vulnerable Software and Affected Versions IzPack versions 5.2.6 and earlier Description IzPack is a tool for packaging Java applications as cross-platform installers. The unpack function within the UnpackerBase class fails to properly validate the targetPath of pack-file entries...

PT-2026-82097

Name of the Vulnerable Software and Affected Versions Formidable Charts versions prior to 2.0.2 Description An issue exists that allows unauthenticated attackers to perform Directory Traversal, a method used to access files and directories that are stored outside the web root folder. By...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093151 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-poi (UTSA-2026-093250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093250 advisory. In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tcpdump (UTSA-2026-093666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093666 advisory. The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to create a...

Linux Distros Unpatched Vulnerability : CVE-2026-61555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...

PT-2026-82051

Name of the Vulnerable Software and Affected Versions OpenRGB affected versions not specified Description The network protocol in OpenRGB contains a flaw that allows an attacker to write controlled strings into arbitrary file system paths. This issue can lead to a full system compromise if the...

PT-2026-82115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the L2TP module when userspace closes /proc/net/pppol2tp or /sys/kernel/debug/l2tp/tunnels before reaching the end-of-file. The iteration state,...