37709 matches found
MiracleLinux 3 : automake-1.9.6-2.3.AXS3 (AXSA:2010-175:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-175:01 advisory. Automake is a tool for automatically generating Makefile.in' files compliant with the GNU Coding Standards. You should install Automake if you are developing...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001764)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001764 advisory. A race condition was found in the Linux kernel's bluetooth device driver in min,maxkeysizeset function. This can result in a null pointer dereference issue, possibly...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001705)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001705 advisory. The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, a...
PT-2026-2563
Name of the Vulnerable Software and Affected Versions versions prior to 2025-68958 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may impact system availability. A race condition occurs when multiple threads access and...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001059)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001059 advisory. Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service list corruption and panic via a rapid series of...
MiracleLinux 3 : nss_ldap-253-12AXS3 (AXSA:2008-276:03)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2008-276:03 advisory. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows applications to retrieve information about users an...
MiracleLinux 3 : systemtap-0.7.2-3.2AXS3 (AXSA:2009-314:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-314:01 advisory. SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system. Fix...
InputPlumber 访问控制错误漏洞
InputPlumber is an input device routing daemon in the ShadowBlip open source. An access control error vulnerability exists in InputPlumber that stems from the presence of a race condition in authorization checking...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001028)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001028 advisory. Race condition in the preparebinprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001718)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001718 advisory. A race condition was found the Linux kernel in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several...
MiracleLinux 4 : bind-9.8.2-0.10.rc1.AXS4.2 (AXSA:2012-830:03)
"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-830:03 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...
TencentOS Server 2: webkitgtk4 (TSSA-2025:0990)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0990 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-001774)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001774 advisory. An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the VC...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001676)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001676 advisory. In pppol2tpcreate of l2tpppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001724 advisory. A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a...
Outray cli is vulnerable to race conditions in tunnels creation
Summary A TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. Details Affected conponent: apps/web/src/routes/api/tunnel/register.ts - /tunnel/register endpoint code-: ts // Check if tunnel already exists in database const...
Outray has a Race Condition in the cli's webapp
Summary This vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in https://github.com/akinloluwami/outray/blob/main/apps/web/src/routes/api/%24orgSlug/subdomains/index.ts Details - The affected code-: ts //Race...
GHSA-45HJ-9X76-WP9G Outray has a Race Condition in the cli's webapp
Summary This vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in https://github.com/akinloluwami/outray/blob/main/apps/web/src/routes/api/%24orgSlug/subdomains/index.ts Details - The affected code-: ts //Race...
GHSA-597G-3PHW-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...
