8 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004225)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004225 advisory. A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security...
PT-2025-44547
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.7.2 Description Nagios XI versions prior to 5.7.2 are susceptible to cross-site scripting XSS through the background color settings within Dashboards. This is due to inadequate validation or escaping of...
SUSE CVE-2020-10711
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option CIPSO protocol's category bitmap into the SELinux extensible bitmap via the' ebitmapnetlblimport' routine. While processing...
Linux kernel code issue vulnerability (CNVD-2020-68542)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.3, which stems from the presence of an issue related to mm/gup.c and mm/hugememory.c. The getuserpages...
UBUNTU-CVE-2020-10751
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages...
PT-2020-3138 · Linux +6 · Linux Kernel +6
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: A flaw in the Linux kernel's SELinux LSM hook implementation allows for insufficient authentication of data. This issue arises because the hook incorrectly assumes that a socket buffer skb...
PT-2019-19771 · Project Jupyter +2 · Jupyter Notebook +2
Name of the Vulnerable Software and Affected Versions: Jupyter Notebook versions prior to 5.7.6 Description: A cross-site inclusion issue allows malicious pages to include resources when visited by authenticated users of a Jupyter server. This can lead to access of resource content, particularly...
PT-2015-3929 · Red Hat · Red Hat Network Satellite +1
Name of the Vulnerable Software and Affected Versions: Red Hat Network Satellite versions prior to 5.7.0 Spacewalk versions prior to 5.7.0 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field. This could...