CVE-2026-76711: Improper Input Validation

A vulnerability exists in an Analytics and Location Engine ALE component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful...

Unity Linux 20.1070e Security Update: libxslt (UTSA-2022-001980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001980 advisory. Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Tenabl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090246 advisory. A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-090031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090031 advisory. Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite...

The vulnerability of the setPermissionCheckHandler method in the software platform for creating Electron applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the setPermissionCheckHandler method in the Electron application development software is related to the lack of proper verification of the reliability of the data source. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 allows a hacker to execute arbitrary code.

The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted HTTP requests...

The vulnerability of the etc/security/mh_default_org.xml scenario of the application for automatic capture, processing, management, and distribution of Opencast videos, allowing a intruder to gain unauthorized access to protected information.

The vulnerability in the script of etc/security/mhdefaultorg.xml of the application for automatic capture, processing, management, and distribution of Opencast videos is related to improper session management when processing the JSESSIONID parameter. Exploiting this vulnerability may allow an...

CVE-2026-77558: Out-of-bounds Read

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77556: Out-of-bounds Read

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : libssh2 vulnerabilities (USN-8799-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8799-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...

Linux Distros Unpatched Vulnerability : CVE-2026-93331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component...

RockyLinux 8 : apr-util (RLSA-2026:69113)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002323 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. Tenable has extracted the preceding description block directly from the Unity Linux security...

Slackware Linux 15.0 / current util-linux Vulnerability (SSA:2026-264-01)

The version of util-linux installed on the remote host is prior to 2.42.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-264-01 advisory. New util-linux packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the precedin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002322 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Tenable has extracted the preceding description block directly from the Unity Linux securi...

The vulnerability of the isPathAllowedForModule function in the vm2 library of the NPM package manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the isPathAllowedForModule function in the vm2 library of the NPM package manager is related to an incorrect restriction on path names for directories. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Scripting components of the Oracle Java SE software platform allows attackers to gain unauthorized access to protected information.

The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Scripting components of the Oracle Java SE software platform allows attackers to gain unauthorized access to protected information.

The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the os and dns modules in the vm2 package manager NPM allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...