133417 matches found
PT-2026-76880
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components...
PT-2026-76613
openssl encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke key method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership...
Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101351)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101351 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :pat...
CVE-2026-67919
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components...
Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory. ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...
PT-2026-73195
A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub 44A968 of the file /cgi-bin/mbox-config?method=SET§ion=ptest macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploi...
Linux Distros Unpatched Vulnerability : CVE-2026-19967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file...
PT-2026-76712
Zephyr's 6LoWPAN IP Header Compression IPHC uncompression code contains an out-of-bounds read in get ihpc inlined size subsys/net/ip/6lo.c. The destination inline size is looked up in da inline size table, which has 13 entries, using an index built from the M, DAC and DAM bits of the received IPH...
PT-2026-76687
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100548)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100548 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of old filters before change Like pointed out by Sashiko 1...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100535 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100733 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ipvseditservice while unbinding the old scheduler...
Important: perl-Net-DNS
Issue Overview: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100355)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100355 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfsbnoderead This patch introduces isbnodeoffsetvalid method that...
PT-2026-73416
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the GET handler, or when an Authorization: Negotiate header is supplied, the response is includes a logical.Auth object in addition to an error message. This results in...
PT-2026-73393
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100719)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100719 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...
Unity Linux 20.1070e Security Update: pam (UTSA-2026-099450)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099450 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...
Unity Linux 20.1070e Security Update: mtr (UTSA-2026-099537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099537 advisory. mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can trigger this bu...
