MiracleLinux 7 : gvfs-1.36.2-3.el7 (AXSA:2019-4036:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4036:01 advisory. gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password CVE-2019-3827 Tenabl...

CVE-2025-13154

An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges...

EUVD-2026-2702

An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the...

CVE-2026-23494

Pimcore is vulnerable to insufficient function-level access control on the API that lists static routes. Prior to versions 12.3.1 and 11.5.14, an authenticated backend user lacking explicit permissions could call the endpoint (e.g., GET /api/static-routes) and retrieve internal static-route confi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003264 advisory. The atyfbioctl function in drivers/video/fbdev/aty/atyfbbase.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003500 advisory. The Linux kernel 4.15 has a Buffer Overflow via an SNDRVSEQIOCTLSETCLIENTPOOL ioctl write operation to /dev/snd/seq by a local user. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001844 advisory. The sndctlelemadd function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003413)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003413 advisory. The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003367 advisory. The compatgettimex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002451)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002451 advisory. The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002575 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002560 advisory. The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002371 advisory. net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002586 advisory. A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2journaldirtymetadata, a denial of service, and a system...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002407 advisory. The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003280 advisory. The compatgettimex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002332 advisory. fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003504 advisory. The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003191 advisory. The vmwsurfacedefineioctl function in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003306 advisory. The acpinsevaluate function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which...