Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000295 advisory. In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c. Tenable has extracted the preceding description blo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993121 advisory. In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean u...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992562 advisory. In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean u...

UBUNTU-CVE-2025-14957

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer...

CVE-2025-14957 WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer...

EUVD-2025-204582

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer...

CVE-2025-14957: NULL Pointer Dereference

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer...

Fortinet FortiWeb Multiple OS Command Injection (FG-IR-25-513)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-513 advisory. - An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in FortiWeb may...

Fortinet FortiWeb Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-122 advisory. - A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memor...

CVE-2025-10089: Uncontrolled Search Path Element

Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application IR all versions, MILCO.S Easy Setting Application IR all versions, and MILCO.S Easy Switch Application IR all...

Malicious code in nina-naget74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a517037c561a8d9f98202b63e834196af789f5957272699d4d433610d0d4ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48717

Malicious code in arif-takokak43-sukiwir npm...

EUVD-2025-47558

Malicious code in galih-nasi47-sukiwir npm...

EUVD-2025-48892

Malicious code in ade-rendang74-sukiwir npm...

EUVD-2025-48336

Malicious code in citra-oncom32-sukiwir npm...

EUVD-2025-42736

Malicious code in oktafian-kembang33-sukiwir npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989069 advisory. In the Linux kernel, the following vulnerability has been resolved: media: irtoy: free before error exiting Fix leak in error path. Tenable has extracted the precedi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988979 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intelsetupirqremapping After commit e3beca48a45b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987634 advisory. In the Linux kernel, the following vulnerability has been resolved: media: irtoy: free before error exiting Fix leak in error path. Tenable has extracted the precedi...

Fortinet FortiAnalyzer SSO SAML authentication (FG-IR-25-198)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-198 advisory. - A concurrent execution using shared resource with improper synchronization 'Race Condition' vulnerability CWE-362 in...