Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001625 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001277 advisory. The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsilockattrmapshared...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000912 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001458 advisory. In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry. Tenabl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004063 advisory. In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlinkcit.c aka the Xirlink camera USB driver mishandles invalid descriptors, aka CID-a246b4d54770. Tenabl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001379 advisory. An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service out-of- bounds memory access and BUG can occur for a modified f2fs...

MiracleLinux 4 : spice-server-0.12.4-16.AXS4.2 (AXSA:2018-3432:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3432:01 advisory. spice: Possible buffer overflow via invalid monitor configurations CVE-2017-7506 Tenable has extracted the preceding description block directly from the...

CVE-2025-14233

CVE-2025-14233 is a Canon CPCA file deletion processing issue (invalid free) affecting Canon Small Office Multifunction Printers and Laser Printers, including Satera LBP670C/SMF750C, Color imageCLASS LBP630C/MF650C, imageCLASS LBP230, LBP1238 II, MF450, MF1643 variants, and i-SENSYS/imageRUNNER S...

CVE-2025-14233

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02...

CVE-2025-14233

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02...

CVE-2025-14233

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02...

CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

CVE-2021-47791

Summary: CVE-2021-47791 affects SmartFTP Client 10.0.2909.0. According to connected sources, the product is vulnerable to multiple denial-of-service conditions triggered by specially crafted input, including malformed paths, invalid IP addresses, or clearing the connection history in the client i...

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

CVE-2025-68792

An out-of-bounds array indexing flaw was found in the Linux kernel's TPM2 session handling code. The namesize lookup function uses TPMALGID values directly as array indices without bounds checking. An unrecognized algorithm ID could cause out-of-bounds memory access, potentially leading to memory...

PT-2026-3163

Name of the Vulnerable Software and Affected Versions SmartFTP Client version 10.0.2909.0 Description SmartFTP Client is susceptible to multiple denial of service issues. An attacker can cause the application to crash by providing specially crafted input. This can be achieved by submitting...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002011)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002011 advisory. Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAPNETADMIN capability a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002715 advisory. A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002180 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC has a buffer overflow vulnerability that stems from the vobsubgetsubpicduration function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...