MiracleLinux 7 : kdelibs-4.14.8-6.el7 (AXSA:2017-1655:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1655:01 advisory. Libraries for KDE 4. Security issues fixed with this release: CVE-2017-8422 KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003694 advisory. In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001322 advisory. There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001329 advisory. The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCPPKTREQUEST packet data structures in the LISTEN state, which...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002127 advisory. The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003119 advisory. The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRMMSGNEWAE update, which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001715 advisory. Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux...

PT-2026-2920

Name of the Vulnerable Software and Affected Versions Blurams Flare Camera versions prior to 24.1114.151.929 Description An insecure authentication mechanism exists in the safe exec.sh startup script. This allows an attacker with physical access to the device to execute arbitrary commands with ro...

MiracleLinux 3 : sudo-1.6.9p17-3AXS3.1 (AXSA:2009-35:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-35:01 advisory. Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001567 advisory. The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRMMSGNEWAE update, which...

CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

CVE-2025-66003

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5...

UBUNTU-CVE-2025-66003

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5...

CVE-2025-66003 Local users can perform a local root exploit via smb4k mounthelper

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5...

CVE-2025-66003

CVE-2025-66003 involves an external control of file name or path in smb4k, enabling a local user to escalate to root via the mounthelper when they can access and control a Samba share. Affected software: smb4k (KDE desktop utility); vulnerability arises from improper validation of filenames/paths...

Smb4K 安全漏洞

Smb4K is a KDE open source online neighborhood browser. A security vulnerability exists in Smb4K versions prior to 4.0.5 that originates from external control of filenames or paths and could lead to a local user performing a local root attack...

CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000242 advisory. In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship,...

Dell PowerScale OneFS 8.2.2 <= 9.4.0.17 / 9.5.0 <= 9.5.0.8 / 9.6.0.0 <= 9.7.0.3 / 9.8.0.0 < 9.8.0.1 Privilege Management (DSA-2024-255)

The Dell PowerScale OneFS on the remote device is missing a security patch and is, therefore, affected by privilege management vulnerability: - Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could...

Dell PowerScale OneFS 8.2.2 <= 9.5.0.8 / 9.6.0 <= 9.7.0.3 / 9.8.0.0 < 9.8.0.1 Multiple Vulnerabilities (DSA-2024-255)

The Dell PowerScale OneFS on the remote device is missing a security patch and is, therefore, affected by Multiple Vulnerabilies as follows: - Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could...