Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001062 advisory. Race condition in the installuserkeyrings function in security/keys/processkeys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service NU...

MiracleLinux 3 : libxml2-2.6.26-2.1.12.2.0.1.AXS3 (AXSA:2012-43:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-43:01 advisory. This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes...

EuskalHack Security Congress IX Call for Papers

EuskalHack Security Congress ninth edition is a new proposal from the EuskalHack Computer Security Association, with the aim to promote the community growth and the culture in the digital security field. As usual, in this new edition proximity to our public and technical quality will be our...

CVE-2025-67833

CVE-2025-67833 affects Paessler PRTG Network Monitor and is an XSS vulnerability. Versions prior to 25.4.114 allow an unauthenticated attacker to execute script via the tag parameter. There is no exploitation detail provided beyond this description in the connected documents. Impact is cross-site...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.49.1.11.4.AXS4 (AXSA:2012-898:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-898:04 advisory. The OpenJDK runtime environment. Security issuses fixed with this release : CVE-2012-0547 A hardening fix was applied to the AWT component in OpenJDK...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001680 advisory. st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVTTRANSACTION buffer overflows because of untrusted length...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001694 advisory. A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device usin...

Linux Distros Unpatched Vulnerability : CVE-2025-71143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 clk:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001648 advisory. The parsehidreportdescriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service out-of-bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001033 advisory. Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001731 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001736 advisory. Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond ...

CVE-2026-22704

HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0...

CVE-2026-22870

creationtimestamp| type| source ---|---|--- 2026-01-13 22:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdljqce3h2x 2026-01-24 21:25:24+00:00| seen| https://gist.github.com/alon710/1704fe210c52be7ed4098a296bff9e33 2026-01-24 22:40:51+00:00| seen|...

EUVD-2026-2040

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

EUVD-2026-2065

Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating...

EUVD-2026-2045

Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-2072

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21277 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-2055

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...