Linux kernel Batadv Interface TX Buffer Overflow DoS

The vulnerability in the batadvinterfacetx function within the net/batman-adv/mesh-interface.c component of the Linux kernel system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel TLS DoS

The vulnerability in the tlsswreadsock function within the net/tls/tlssw.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux kernel DoS

The vulnerability in the unixreleasesock function within the net/unix/afunix.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146151 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

simple-git Plugin Code Execution

The vulnerability in the git.clone function of the blockUnsafeOperationsPlugin plugin within the simple-git library on the Node.js programming platform is related to improper data sanitization at the control level when processing the customArgs parameter. Exploitation of this vulnerability may...

Linux ionic_qcqs_free Heap Buffer Overflow DoS

The vulnerability in the ionicqcqsfree function within the drivers/net/ethernet/pensando/ionic/ioniclif.c component of the Linux kernel is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the vesafbprobe function within the drivers/video/fbdev/vesafb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146341 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfeventoutput We received report 1 of kernel crash, which is caused b...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2026:1793098772)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793098772 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...

PT-2026-126684

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.33.14 Description The Linux implementation of the networkStatsiface function fails to properly validate the iface variable when performing an fs.existsSync check and constructing paths under /sys/class/net...

Linux Distros Unpatched Vulnerability : CVE-2026-116259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-98911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This i...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the binderinit function of the Linux kernel is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the inetdelifa function within the net/ipv4/devinet.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Load UCS Package Manager Data

This plugin reads in UCS formatted package manager data and formats it to the expected format for the SSH info-gathering pipeline. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid372413; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate",...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1793098886)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793098886 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...

Hitachi Energy RTU500 Missing Authentication for Critical Function (CVE-2026-8065)

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integri...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2026:1793098806)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793098806 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destinati...

PT-2026-127230

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process packet path in russh/src/client/encrypted.rs accepts repeated packets encoded with russh's private msg::EXT INFO = 7 before authentication, while the...

CVE-2026-117515: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...