11 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011032)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011032 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...
CVE-2025-52615
HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers...
CVE-2025-52615
HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers...
CVE-2022-49567 mm/mempolicy: fix uninit-value in mpol_rebind_policy()
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpolrebindpolicy mpolsetnodemaskmm/mempolicy.c does not set up nodemask when pol-mode is MPOLLOCAL. Check pol-mode before access pol-w.cpusetmemsallowed in mpolrebindpolicymm/mempolicy.c. BUG:...
UBUNTU-CVE-2023-3106
A NULL pointer dereference vulnerability was found in netlinkdump. This issue can occur when the Netlink socket receives the messagesendmsg for the XFRMMSGGETSA, XFRMMSGGETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due t...
Code injection
An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice...
SUSE-SU-2017:3284-1 Security update for the Linux Kernel (Live Patch 11 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-9232 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...
Cisco Firepower System Software SSL Policy Bypass Vulnerability
Cisco Firepower is a family of advanced firewalls. A security vulnerability exists in Cisco Firepower's handling of specially constructed SSL packet headers that interact with multiple configurations of SSL policies, allowing remote attackers to exploit the vulnerability to submit special SSL...
CVE-2017-1328
IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...
Cisco Firepower System Software Denial of Service Vulnerability (CNVD-2017-06817)
Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A denial of service vulnerability exists in the access control policy of Cisco Firepower System Software, which stems from the program's failure to properly handle SSL policies. A remote attacker could exploit...
DEBIAN-CVE-2015-8630
The 1 kadm5createprincipal3 and 2 kadm5modifyprincipal functions in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash b...