228423 matches found
ROS-20260821-73-0009
The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux operating system’s kernel, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-79475
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...
PT-2026-79329
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...
SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:3654-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3654-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001491)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001491 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilcnetdevcleanup...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102061)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102061 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability Why A null pointer dereference...
php:8.3 security, bug fix, and enhancement update
php 8.3.33-1 - rebase to 8.3.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102039)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102039 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with...
ROS-20260821-73-0056
The vulnerabilities of the functions virtiommioreleasedev and virtiommioprobe in the drivers/virtio/virtiommio.c module related to the virtio chipset support in Linux operating systems are associated with operations involving resources after their expiration time. Exploiting these vulnerabilities...
kernel security, bug fix, and enhancement update
4.18.0-553.157.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
Detect-CVE-2017-15361-TPM
Detectar Módulos de Plataforma Confiável Vulneráveis ao CVE-2017-15361 Este repositório fornece conteúdo para auxiliar administradores do DoD na detecção de sistemas que possuem um Trusted Platform Module TPM ativado e vulnerável ao CVE-2017-15361, sendo um complemento ao Information Assurance...
USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8665-1 linux-raspi, linux-raspi-realtime vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8664-1 linux-nvidia-bos vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
DEBIAN-CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...
