Micro Focus Operations Bridge Reporter - Remote Code Execution

Micro Focus Operations Bridge Reporter 10.40 is susceptible to remote code execution. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or execute unauthorized operations without entering necessary credentials. id: CVE-2021-22502 info: name: Micro Focus...

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

Apache Tomcat - Open Redirect

Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2018-11784 info: name: Apache Tomcat - Open Redirect author: geeknik severity: medium description: | Apache Tomcat versions...

SSL VPN Session Hijacking

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. id: CVE-2024-53704 info: name: SSL VPN Session Hijacking author: johnk3r severity: critical description: | An Improper Authentication vulnerability in the SSLVPN...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090421 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freeradius (UTSA-2026-090227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090227 advisory. In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the huntin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-091426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091426 advisory. A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001490 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003032 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shadow (UTSA-2023-001594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001594 advisory. In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this...

Linux Distros Unpatched Vulnerability : CVE-2026-90783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic...

Linux Distros Unpatched Vulnerability : CVE-2026-90616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code...

FreeBSD : Gitlab -- vulnerabilities (7fd351d1-af26-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7fd351d1-af26-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Path Traversal issue in repository commits API impacts GitLab CE/EE Insecure...

Fedora 44 : PackageKit (2026-6cf9691266)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6cf9691266 advisory. Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-87020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied...

Fedora 45 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-37e598af67)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-37e598af67 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2023-001587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001587 advisory. Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091417 advisory. SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used because of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-001257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001257 advisory. A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000586 advisory. Out-of-bounds Read in vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus h...