33487 matches found
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
OSV-2026-49 Heap-buffer-overflow in check_sync_pes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475305126 Crash type: Heap-buffer-overflow READ Crash state: checksyncpes Demux demuxprocessstream...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002691)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002691 advisory. The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stac...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002639)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002639 advisory. The initnewcontext function in arch/x86/include/asm/mmucontext.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002826)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002826 advisory. The initnewcontext function in arch/x86/include/asm/mmucontext.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003259)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003259 advisory. The time subsystem in the Linux kernel through 4.9.9, when CONFIGTIMERSTATS is enabled, allows local users to discover real PID values as distinguished from PID valu...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002728)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002728 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001790)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001790 advisory. The copycreds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002575)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002575 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002729)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002729 advisory. An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious...
TTY PLUS MTPuTTY security vulnerabilities
TTY PLUS MTPuTTY is a Shell management tool developed by TTY PLUS Corporation. Version 1.0.1.21 of TTY PLUS MTPuTTY contains a security vulnerability. This vulnerability stems from the Windows PowerShell process list potentially exposing SSH connection passwords, leading to the leakage of sensiti...
PT-2026-3035
MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH...
Arcane operating system command injection vulnerability
Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.13.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the update process, where command injection was possible, potentially allowing for t...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003423)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003423 advisory. The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCPPKTREQUEST packet data structures in the LISTEN state, which...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002894)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002894 advisory. The time subsystem in the Linux kernel through 4.9.9, when CONFIGTIMERSTATS is enabled, allows local users to discover real PID values as distinguished from PID valu...
CVE-2025-37179
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. Under specific conditions, this can...
CVE-2025-37178
Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. Under specific conditions, this can...
CVE-2026-20941
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
CVE-2026-22854 FreeRDP has a heap-buffer-overflow in drive_process_irp_read
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...
