Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the diskStorage engine's handleFile function, which fails to close or destroy the destination write stream when an upload is aborted before it completes. Each aborted request leaks an open file descriptor and...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the appendField call in make-middleware.js when processing multipart form field names. An attacker can send a request containing an invalid field name that causes appendField to throw an uncaught exception,...

PT-2026-83418

In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GRO LEGACY MAX SIZE 64KB, BIG TCP should only be permitted for plain IPv4 TCP and plain IPv6 TCP with sufficient MAC header ro...

Linux Distros Unpatched Vulnerability : CVE-2026-59944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer project reports: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Fixed command injection via...

Linux Distros Unpatched Vulnerability : CVE-2026-38821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the...

Linux Distros Unpatched Vulnerability : CVE-2026-33606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protoco...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001464 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ataportalloc call in atahostalloc fails, w...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001434 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to...

Linux Distros Unpatched Vulnerability : CVE-2026-73208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001401 advisory. In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmciresourceremove When removing a resource fr...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001485 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001501 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The devdbg&urb-dev-dev, ... which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001409 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001399 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifstncendcommit After an insertion in TNC, the tre...

Linux Distros Unpatched Vulnerability : CVE-2026-33604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body t...

Linux Distros Unpatched Vulnerability : CVE-2026-82254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-82247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in version...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001495 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bi...

Debian dla-4759 : xrdp - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4759 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4759-1 [email protected]...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001422 advisory. In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructe...