606135 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-79089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098974)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098974 advisory. In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward,...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031329)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031329 advisory. ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrar...
The vulnerability of the keycloak-services component of the Keycloak identity and access management software allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to the system.
The vulnerability of the keycloak-services component of the Keycloak identity and access management software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass existing security measures and gain unauthorized access to the syst...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031330)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031330 advisory. The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page...
Broken access control in dashboard snapshots
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot’s secret delete key using only its public share key broken access control...
PT-2026-81967
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...
Linux Distros Unpatched Vulnerability : CVE-2026-78959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...
CVE-2025-70340
A Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below affects the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabling impersonation of system mess...
PT-2026-82117
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the packet reception path where the MAC Port ID is extracted from the RX DMA Descriptor metadata. The helper function cppi5 desc get tags ids incorrectly assigns a...
PT-2026-82066
Name of the Vulnerable Software and Affected Versions TarsWeb affected versions not specified Description Improper authorization occurs because four methods in app/controller/patch/PatchController.js fail to call the AuthService to enforce per-application roles. This allows any authenticated user...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093299)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093299 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 5.7.28 and prior. Easily...
Linux Distros Unpatched Vulnerability : CVE-2026-79201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093145 advisory. A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise Hi...
GLSA-202608-27 : GNU screen: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-27 GNU screen: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU screen. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093616)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093616 advisory. a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled Th...
Linux Distros Unpatched Vulnerability : CVE-2026-79015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted...
