Lucene search
K

14419 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005264 advisory. In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized...

7.5CVSS5.6AI score0.00474EPSS
Exploits3References3
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-005269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005269 advisory. Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

7.8CVSS5.5AI score0.00101EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005273 advisory. In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescapefunction on 32-bit systems can cause an...

9.8CVSS7.1AI score0.01284EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clickhouse (UTSA-2026-005268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005268 advisory. An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint usually listening on port 8123 by defaul...

7.5CVSS5.8AI score0.00968EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005265 advisory. In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in arraymerge when t...

8.2CVSS5.8AI score0.00428EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: varnish (UTSA-2026-005271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005271 advisory. A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may resul...

7.5CVSS5.8AI score0.06887EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-005274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005274 advisory. In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath. Tenable has...

9.3CVSS7.9AI score0.00315EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-005276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005276 advisory. MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service Tenable has extracted the preceding description block directl...

5.5CVSS5.5AI score0.00124EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-005272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005272 advisory. GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

8.8CVSS8.5AI score0.00708EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-005277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005277 advisory. Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file Tenable has extracted t...

7.8CVSS7.2AI score0.00299EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clickhouse (UTSA-2026-005267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005267 advisory. An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user with the ability to load data could cause a heap buffer overflow and crash the server...

6.5CVSS6.7AI score0.00705EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: varnish (UTSA-2026-005275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005275 advisory. Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests. Tenable has extracted the preceding description bloc...

5.4CVSS5.4AI score0.00266EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/31 9:12 a.m.13 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS6.1AI score0.00599EPSS
Exploits0References1
OSV
OSV
added 2026/01/30 9:15 a.m.3 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2026/01/30 9:15 a.m.8 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS0.00599EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/30 8:38 a.m.6 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS6.1AI score0.00599EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/30 8:38 a.m.6 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS6.1AI score0.00599EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/30 8:38 a.m.4 views

EUVD-2026-5034

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS6.1AI score0.00599EPSS
Exploits0References1
CVE
CVE
added 2026/01/30 8:38 a.m.36 views

CVE-2026-21418

CVE-2026-21418 affects Dell Unity prior to 5.5.3 (Dell Unity, Dell UnityVSA, and Dell Unity XT as indicated). The vulnerability is an OS Command Injection due to improper neutralization of special elements, allowing a low-privilege, local attacker to potentially run arbitrary commands with root p...

7.8CVSS6.1AI score0.00599EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/30 8:38 a.m.26 views

CVE-2026-21418

Dell Unity, versions 5.5.2 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root...

7.8CVSS0.00599EPSS
Exploits0References1
Rows per page
Query Builder