Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093153 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093616 advisory. a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled Th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libproxy (UTSA-2026-093161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093161 advisory. url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tcpdump (UTSA-2026-093666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093666 advisory. The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to create a...

CVE-2026-75327

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...

CVE-2025-61165

Cohere North AI v1.1.5 contains an arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component that allows unauthenticated remote attackers to achieve arbitrary code execution by uploading a crafted file. The CNA-assigned CVSS v3.1 score is 9.8 (Critical) (AV:N/AC:L/PR:N/UI:N/S...

Linux Distros Unpatched Vulnerability : CVE-2026-61555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hivex (UTSA-2026-093175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093175 advisory. A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer-plugins-good (UTSA-2026-093155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093155 advisory. The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-78957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. Chromi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093151 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...

RockyLinux 10 : golang (RLSA-2026:22120)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:22112)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

PT-2026-81983

Name of the Vulnerable Software and Affected Versions EFence affected versions not specified Description An arbitrary file upload flaw allows unauthenticated remote attackers to upload and execute web shell backdoors, which can lead to arbitrary code execution on the server. Recommendations At th...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

EUVD-2026-66749

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413

DocSys V2.02.80 contains an Any File Download vulnerability in the downloadDocEx.do interface. An unauthenticated attacker can exploit the targetPath parameter to download arbitrary files over the network without any prior authentication. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network at...

CVE-2026-75331

tamguo 1.5.3 is affected by an Unrestricted File Upload vulnerability that leads to Stored XSS . The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java lack file type validation, allowing authenticated attackers to upload arbitrary HTML or JavaScript file...

PT-2026-82218

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The browser-items API does not restrict accepted paths to the project directory. Specifically, the BrowserItemResource in mage ai/api/resources/BrowserItemResource.py passes caller-supplied...

PT-2026-82319

Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file read issue exists in the 'downloadDocEx' interface located in src/com/DocSystem/controller/DocController.java. This allows an attacker to read files from the system that they should n...