22797 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002968)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002968 advisory. The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service use-after-free and...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002417)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002417 advisory. Memory leak in the kvmsetmemoryregion function in virt/kvm/kvmmain.c in the Linux kernel before 3.9 allows local users to cause a denial of service memory consumptio...
EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-1078)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001887)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001887 advisory. The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002834)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002834 advisory. An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002544)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002544 advisory. The HMAC implementation crypto/hmac.c in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a loc...
Failed to create a restore point: PostgreSQL database operation failed multiple times with transient error.
Challenge After upgrading to Veeam Backup for Microsoft 365 8.2 or 8.3, jobs fail with the erorr: Failed to create a restore point: PostgreSQL database operation failed multiple times with transient error. Cause This issue occurs because various one-time PostgreSQL queries that the software...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003173)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003173 advisory. The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002276)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002276 advisory. The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows loca...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001919)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001919 advisory. kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002369)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002369 advisory. The sndctlelemadd function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the userctlcount...
MiracleLinux 8 : mariadb:10.3 (AXSA:2026-040:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-040:01 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding...
PT-2026-3168
Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002004 advisory. The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers ...
CVE-2026-0600
Server-Side Request Forgery SSRF vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network...
CVE-2026-0600 Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration
Server-Side Request Forgery SSRF vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network...
CVE-2026-0601 Nexus Repository 3 - Cross-Site Scripting
A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
Impact Attempting to parse a patch whose filename headers contain the line break characters \r, \u2028, or \u2029 can cause the parsePatch method to enter an infinite loop. It then consumes memory without limit until the process crashes due to running out of memory. Applications are therefore...
