MiracleLinux 8 : nodejs:18 (AXSA:2024-7654:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7654:01 advisory. nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks CVE-2024-22019 nodejs: vulnerable to timing variant of th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003761 advisory. An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the...

MiracleLinux 7 : nspr-4.21.0-1.el7, nss-util-3.44.0-3.el7, nss-softokn-3.44.0-5.el7, nss-3.44.0-4.el7 (AXSA:2019-4268:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4268:01 advisory. ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries CVE-2018-0495 nss: Cache side-channel variant of the Bleichenbacher attack...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003617 advisory. An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001337 advisory. arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001227 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...

New CastleLoader Variant Linked to 469 Infections Across Critical Sectors

ANY.RUN report reveals how the new CastleLoader malware targets US government agencies using stealthy ClickFix tricks and memory-based attacks to bypass security...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003534 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003564 advisory. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may...

EUVD-2026-2308

In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomapadjustreadrange assumes that the position and length passed in are block-aligned. This is not always the case however, as shown in the syzbot generated case...

EUVD-2026-1703

GestSup versions up to and including 3.2.56 contain a pre-authentication stored cross-site scripting XSS vulnerability in the API error logging functionality. By sending an API request with a crafted X-API-KEY header value for example, to /api/v1/ticket.php, an unauthenticated attacker can cause...

CVE-2021-27426

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

SUSE-SU-2026:20045-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2025-13601: Fixed Integer overflow in in gescapeuristring bsc1254297 - CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption bsc1254662 - CVE-2025-14512: Fixed Integer Overflow in GLib GIO Attribute Escaping Caus...

GHSA-6C5R-4WFC-3MCX vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

GHSA-QV3P-FMV3-9HWW vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

CVE-2021-34429 vulnerabilities

Vulnerabilities for packages: apache-hop, apache-hop-fips...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000205 advisory. An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the...

EUVD-2026-0467

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0666

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later...

EUVD-2025-205183

In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of deltimersync must prevent restarting of the timer, If we have no this synchronization, there is a small probability that the cancellation will not be...