Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002329 advisory. Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. Tenable ha...

SUSE SLED15 / SLES15 Security Update : jq (SUSE-SU-2026:4275-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4275-1 advisory. Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054070 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c. Tenable has extracte...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002322 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090164 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received D...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002317 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000535 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2023-001571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001571 advisory. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that ca...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000546 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

PT-2026-97071

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description A remote authenticated attacker can access or modify unauthorized resources. This is caused by the use of wildcards in Role-Based Access Control RBAC permission definitions, which is a metho...

PT-2026-97074

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper configuration of HTTP method-based security constraints could allow a remote attacker to perform unauthorized actions...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000579 advisory. Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Tenable has extracted the preceding description block directly from the Unit...

PT-2026-97009

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

CVE-2026-95508: Out-of-bounds Write

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

CVE-2026-37604

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTPCLIENTIP and HTTPXFORWARDEDFOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout are...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000582 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. Tenable has extracted the preceding description block directly from the Unity Linux securi...

CVE-2026-37604

pH7Builder (pH7 Social Dating CMS) versions through 18.2.0 are vulnerable to an IP-based throttling bypass. The application resolves the client IP address in _protected/framework/Ip/Ip.class.php using the HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR headers without validating that the request originat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glusterfs (UTSA-2023-001153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001153 advisory. In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. Tenable has extracted the preceding description bloc...

Adobe Substance 3D Modeler 1.0.0 < 1.22.8 Multiple Arbitrary code execution (APSB26-155)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-155 advisory. - Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in...