Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52860)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004129 advisory. NULL Pointer Dereference vulnerability in openEuler kernel on Linux network modules allows Pointer Manipulation. This vulnerability is associated with program files...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001581 advisory. NULL Pointer Dereference vulnerability in openEuler kernel on Linux network modules allows Pointer Manipulation. This vulnerability is associated with program files...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48727)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003719 advisory. An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003721 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004363 advisory. A null pointer dereference issue was found in can protocol in net/can/afcan.c in the Linux before Linux. mlpriv may not be initialized in the receive path of CAN...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003736 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb....

MiracleLinux 7 : binutils-2.27-34.base.el7 (AXSA:2018-3397:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3397:04 advisory. binutils: Improper bounds check in coffgen.c:coffpointerizeaux allows for denial of service when parsing a crafted COFF file CVE-2018-7208 binutils:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004386 advisory. In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during...

MiracleLinux 4 : httpd24-httpd-2.4.25-9.AXS4.1 (AXSA:2017-2175:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2175:02 advisory. It was discovered that the httpd's modauthdigest module did not properly initialize memory before using it when processing certain headers related t...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52866)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

MiracleLinux 7 : compat-libtiff3-3.9.4-12.el7 (AXSA:2019-4119:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4119:01 advisory. libtiff: NULL pointer dereference in tifprint.c:TIFFPrintDirectory causes a denial of service CVE-2018-7456 Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001043 advisory. The rdsibladdrcheck function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service NULL pointer dereference and system...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000724 advisory. The sctpassocupdate function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a deni...

MiracleLinux 7 : sox-14.4.1-7.el7 (AXSA:2019-4121:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4121:01 advisory. sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 Tenable has extracted the preceding description block directly from the MiracleLin...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52432)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003708 advisory. drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

MiracleLinux 4 : libtasn1-2.3-6.AXS4 (AXSA:2014-385:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-385:01 advisory. This is the ASN.1 library used in GNUTLS. More up to date information can be found at http://www.gnu.org/software/gnutls and http://www.gnutls.org...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003882 advisory. An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in th...