559322 matches found
PT-2026-76865
Name of the Vulnerable Software and Affected Versions hermes-studio version 0.6.26 Description A directory traversal issue allows a remote attacker to obtain sensitive information. This occurs through the validatePath function within the 'api/hermes/download' endpoint. Directory traversal is a fl...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100300 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. T...
Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099529)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099529 advisory. A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of the file strip.c of th...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100295)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100295 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099729)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099729 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compatmtwfromuser Luxiao Xu says: The function...
CVE-2026-67965
Tenda W20E V5.0 firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin exposes url_need_login to bypass authentication when the admin password is empty (factory default), enabling unauthenticated activation of /goform/ate — an AES-128-CBC backdoor on UDP/7329 using hardcoded key Tenda0123456789M...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099782)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099782 advisory. In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100186)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100186 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory...
The vulnerability of the rto_next_cpu() function in the sched/rt.c component of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the rtonextcpu function in the sched/rt.c component of the Linux kernel’s firmware is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100587)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100587 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6datagramrecvspecificctl builds...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100713)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100713 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099719)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099719 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependenc...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099908)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099908 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100allocrings allocates rxskbs,...
Important: rust-cargo-c
Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100747 advisory. In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100528)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100528 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual...
Unity Linux 20.1070e Security Update: libxml2 (UTSA-2026-099459)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099459 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099987)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099987 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...
Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099550)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099550 advisory. Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser ...
