Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001961 advisory. arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002796 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003358 advisory. The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002049 advisory. The ttysettermiosldisc function in drivers/tty/ttyldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002189 advisory. The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service memory corruption o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001857 advisory. The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNELDS option is set, which allows local...

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

TLP 授权问题漏洞

TLP is a power management software for linrunner personal developers. An authorization issue vulnerability exists in TLP version 1.9 up to and including version 1.9.1, which stems from improper authentication and could lead to a local user arbitrarily controlling power profiles and daemon log...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000568 advisory. Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000542 advisory. The ipcrcuputref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001055 advisory. Use-after-free vulnerability in the xacctaddtsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000758 advisory. The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows loc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001616 advisory. The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001088 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001059 advisory. Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service list corruption and panic via a rapid series of...

CVE-2023-54336

Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\medicont3\ to inject malicious code that would execute with...

CVE-2022-50930

Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execut...

CVE-2022-50923

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...

CVE-2022-50923

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...