ROS-20260821-73-0070

The vulnerability of the virtioumlprobe function in the arch/um/drivers/virtiouml.c file of 1 Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260821-73-0003

The vulnerability of the mvpp2ethtoolgetrxnfc function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0009

The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux operating system’s kernel, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0007

The vulnerability of the jfslink function in the fs/jfs/namei.c file of the JFS file system in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260821-73-0016

The vulnerability of the rununpack function in the ntfs3 component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to protected information...

PT-2026-79487

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

PT-2026-79475

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...

Linux Distros Unpatched Vulnerability : CVE-2026-72847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call...

openSUSE 16 Security Update : python-unearth (openSUSE-SU-2026:21606-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21606-1 advisory. Changes in python-unearth: - CVE-2026-73030: iswithindirectory function fails to normalize paths before validation and allows ../ sequences to bypass...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102022 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102054 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin in the function...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102075 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh2 (UTSA-2026-031606)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031606 advisory. A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulati...

UBUNTU-CVE-2022-4996

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102706 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102053 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic f...

PT-2026-79474

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.124.0 through 0.141.0 Description An unauthenticated client can trigger a denial of service by sending a query with sparse indexes in a deepObject query parameter to an endpoint whose schema contains an array. The functi...

CVE-2026-15686

Adminer multiquery Incorrect Check of Function Return Value Remote Co...

PT-2026-79409

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the command collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

Vulnerability of the freerdp_dsp_decode_opus() function in the libfreerdp/codec/dsp.c file of the RDP client FreeRDP, which allows a hacker to trigger a service denial and execute arbitrary code.

The vulnerability of the freerdpdspdecodeopus function in the libfreerdp/codec/dsp.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure and execute arbitrary code...