FreeBSD : znc -- multiple vulnerabilities (b7ae786a-af80-11f1-9800-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b7ae786a-af80-11f1-9800-641c67a117d8 advisory. ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001601 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but...

MiracleLinux 8 : thunderbird-140.14.0-1.el8_10.ML.1 (AXSA:2026-1814:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1814:20 advisory. firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Privilege escalation in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2024-004029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-004029 advisory. A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. AddType and similar configuration,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2023-003823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003823 advisory. Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi module. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2023-003837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003837 advisory. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000211 advisory. Use After Free in GitHub repository vim/vim prior to 8.2.4979. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zziplib (UTSA-2026-090376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090376 advisory. Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value zzipfileread in the function unzzipcatfile. Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-90773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: microcode_ctl (UTSA-2026-091424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091424 advisory. Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2022-000997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000997 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2023-002898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002898 advisory. IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct doll...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-003615)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003615 advisory. An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service DoS via crafted .pdf file to FoFiType1C::cvtGlyp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090427 advisory. Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090158 advisory. When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-003034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003034 advisory. A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2024-000296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-000296 advisory. A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification...

Linux Distros Unpatched Vulnerability : CVE-2026-90781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001597)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001597 advisory. An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-099171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099171 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...