Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002057 advisory. The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001945 advisory. Heap-based buffer overflow in the iscsiaddnotunderstoodresponse function in drivers/target/iscsi/iscsitargetparameters.c in the iSCSI target subsystem in the Linux...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002424 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003481 advisory. The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obta...

PT-2026-3044

Name of the Vulnerable Software and Affected Versions ImportExportTools NG version 10.0.4 Description ImportExportTools NG has a persistent HTML injection issue in the email export module. Remote attackers can inject malicious HTML payloads. Attackers can send emails with crafted HTML in the...

Linux Distros Unpatched Vulnerability : CVE-2025-14242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002337 advisory. net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002779 advisory. The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger...

PT-2026-3069

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC affected versions not specified Description A flaw exists in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002060 advisory. Race condition in the athtxaggrsleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of...

CVE-2026-0530

A flaw was found in Kibana Fleet. A remote attacker could exploit this vulnerability by sending a specially crafted request, leading to an excessive allocation of resources. This continuous consumption of system resources can result in service degradation or complete unavailability, effectively...

CVE-2025-37185

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary...

USN-7962-1: cpp-httplib vulnerability

It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate users...

USN-7962-1 cpp-httplib vulnerability

It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate users...

CVE-2025-37184 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby...

CVE-2025-37183

CVE-2025-37183 affects the web-based management interface of EdgeConnect SD-WAN Orchestrator. An authenticated remote attacker could exploit an SQL injection vulnerability in the web UI to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access o...

CVE-2025-14242

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

CVE-2025-14242 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

EUVD-2026-2461

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

CVE-2026-22240

The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable users API to retrieve the...