516 matches found
MiracleLinux 9 : golang-1.24.6-1.el9_6 (AXSA:2025-10754:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10754:04 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the MiracleLinux security...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000305)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000305 advisory. vcswrite in drivers/tty/vt/vcscreen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a. Tenable has extracted t...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992369)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992369 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcsread 1, for buffe...
CVE-2025-68165
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup...
CVE-2025-68165
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup...
EUVD-2025-203765
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup...
CVE-2025-66407
Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...
PT-2025-51716
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup...
PT-2025-51337
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate is a web-based localization tool. The Create Component functionality allows authorized users to add new translation components by specifying a version control system and a source code reposito...
EulerOS 2.0 SP13 : golang (EulerOS-SA-2025-2521)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a...
CVE-2023-53747
In the Linux kernel, the following vulnerability has been resolved: vcscreen: reload load of struct vcdata pointer in vcswrite to avoid UAF After a call to consoleunlock in vcswrite the vcdata struct can be freed by vcportdestruct. Because of that, the struct vcdata pointer must be reloaded in th...
CVE-2023-53747
CVE-2023-53747 affects the Linux kernel’s virtual terminal driver (vc_screen). The issue arises in vcs_write() where, after console_unlock(), the vc_data object may be freed by vc_port_destruct(), causing a Use-After-Free when vcs_size() is later invoked. The fix reloads the pointer to the vc_dat...
PT-2025-49477
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the vc screen module. Specifically, a struct vc data pointer in the vcs write function can be freed by vc port destruct after a ca...
Linux Distros Unpatched Vulnerability : CVE-2023-53747
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vcscreen: reload load of struct vcdata pointer in vcswrite to avoid UAF After a call to consoleunlock in vcswrite the vcdata struct can be freed by...
CVE-2025-64688
...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990071)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990071 advisory. In the Linux kernel, the following vulnerability has been resolved: vcscreen: move load of struct vcdata pointer in vcsread to avoid UAF After a call to consoleunloc...
TencentOS Server 3: go-toolset:rhel8 (TSSA-2025:0791)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0791 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
AlmaLinux 10 : golang (ALSA-2025:13941)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13941 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...