22034 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003180)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003180 advisory. Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service double free or...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003374)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003374 advisory. Race condition in the sclpctlioctlsccb function in drivers/s390/char/sclpctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from...
Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro
Overview Redmi Buds, a series of Bluetooth earbuds produced and sold by Xiaomi, contain an Information Leak vulnerability and a Denial of Service DoS vulnerability in versions 3 Pro through 6 Pro. An attacker within Bluetooth radio range can send specially crafted RFCOMM protocol interactions to...
PT-2026-2985
Name of the Vulnerable Software and Affected Versions Grafana OSS versions prior to 12.0.2+security-01 Grafana OSS versions prior to 11.6.3+security-01 Grafana OSS versions prior to 11.5.6+security-01 Grafana OSS versions prior to 11.4.6+security-01 Grafana OSS versions prior to 11.3.8+security-0...
EulerOS 2.0 SP12 : libpng (EulerOS-SA-2026-1092)
According to the versions of the libpng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003380)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003380 advisory. The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of- bounds read and system crash or possibly have unspecified...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002381)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002381 advisory. The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a deni...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003029 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...
openSUSE 16 Security Update : python-tornado6 (openSUSE-SU-2026:20015-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20015-1 advisory. - CVE-2025-67724: unescaped reason argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001917)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001917 advisory. Integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Tenable has extracted the precedin...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003023)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003023 advisory. The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003097)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003097 advisory. The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service use-after-free and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002676)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002676 advisory. drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003000)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003000 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...
Oracle Linux 9 : postgresql (ELSA-2026-0491)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0491 advisory. - Resolves: RHEL-128812 CVE-2025-12818 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003528)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003528 advisory. The tcpv6synrecvsock function in net/ipv6/tcpipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service slab out-of-bounds write or...
CVE-2026-0421
CVE-2026-0421 involves Lenovo ThinkPad BIOS where Secure Boot can be turned off even when the BIOS reports it as On, specifically on systems with Secure Boot configured to User Mode. Affected models include ThinkPad L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2. The issue is described as ...
AZL-74543 CVE-2026-0962 affecting package wireshark 4.4.7-2
SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...
