295415 matches found
RLSA-2026:22121 Important: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...
RLSA-2026:22112 Important: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum...
go-toolset:rhel8 security update
An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...
PT-2026-82062
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
PT-2026-82106
The LoRaWAN TS004 Fragmented Data Block Transport handler frag transport package callback in subsys/lorawan/services/frag transport.c parses downlink command bytes without validating that enough payload bytes remain before each access. The loop's only bound is rx pos frag size, capped at CONFIG...
EUVD-2026-66747
JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...
EUVD-2020-31269
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php API endpoint...
CVE-2020-15874
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php API endpoint...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098916)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098916 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098701)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098701 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zsh (UTSA-2026-061494)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061494 advisory. In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098699)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098699 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited...
CVE-2026-75411
JeecgBoot v3.9.2 is vulnerable to remote command execution in the CodeNode component of its AI Flow module. The component supports Groovy script execution, and while the SecurityCheck class applies a blacklist to intercept dangerous calls, the dynamic nature of Groovy allows the blacklist to be c...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104758)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104758 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104775)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104775 advisory. Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly...
PT-2026-82281
Name of the Vulnerable Software and Affected Versions ZoneMinder affected versions not specified Description An authenticated OS command injection issue exists in the event export functionality. An authenticated user with View Events permission can execute arbitrary operating system commands on t...
SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3680-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3680-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. -...
PT-2026-82070
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
PT-2026-81920
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...
PT-2026-82059
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...