Lucene search
+L

1352 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•2 views

CVE-2026-22822: Incorrect Authorization

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

9.3CVSS5.8AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000576 advisory. The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to...

6.2CVSS6.3AI score0.03303EPSS
SaveExploits4References13
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004322 advisory. Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example,...

5.1CVSS6.4AI score0.00412EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003827 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...

6.5CVSS6.7AI score0.00518EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001105 advisory. A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function getnetnsbyid in net/core/netnamespace.c...

4.9CVSS6.3AI score0.00357EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•10 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001426 advisory. Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example,...

5.1CVSS6.4AI score0.00412EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000539 advisory. The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to...

4.6CVSS6.7AI score0.00498EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000674 advisory. kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace,...

7CVSS7.2AI score0.00398EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•9 views

MiracleLinux 7 : kernel-3.10.0-693.5.2.el7 (AXSA:2017-2376:09)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2376:09 advisory. Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink...

7.8CVSS7.2AI score0.20797EPSS
SaveExploits34References10
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•12 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003970 advisory. Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example,...

5.1CVSS6.4AI score0.00412EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003140 advisory. In the Linux kernel 4.15.x through 4.19.x before 4.19.2, mapwrite in kernel/usernamespace.c allows privilege escalation because it mishandles nested user namespaces...

7CVSS7.4AI score0.07611EPSS
SaveExploits24References18
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003419 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

7.8CVSS6.3AI score0.00406EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003302 advisory. net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows loca...

7.8CVSS6.3AI score0.00406EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•16 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002523 advisory. The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to...

6.2CVSS6.3AI score0.03303EPSS
SaveExploits4References13
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003163 advisory. In the Linux kernel 4.15.x through 4.19.x before 4.19.2, mapwrite in kernel/usernamespace.c allows privilege escalation because it mishandles nested user namespaces...

7CVSS7.4AI score0.07611EPSS
SaveExploits24References18
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003129 advisory. Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes...

7.8CVSS6.8AI score0.11127EPSS
SaveExploits17References11
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002230 advisory. fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount o...

6.2CVSS7AI score0.00881EPSS
SaveExploits6References15
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003172 advisory. A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function getnetnsbyid in net/core/netnamespace.c...

4.9CVSS6.3AI score0.00357EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•13 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002531 advisory. The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to...

6.2CVSS6.3AI score0.03303EPSS
SaveExploits4References13
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•6 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002453 advisory. fs/namespace.c in the Linux kernel before 4.0.2 processes MNTDETACH umount2 system calls without verifying that the MNTLOCKED flag is unset, which allows local users...

6.1CVSS7.4AI score0.00331EPSS
SaveExploits0References14
Rows per page
Query Builder