Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000731 advisory. drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003773 advisory. The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by...

MiracleLinux 4 : samba-3.6.23-25.AXS4 (AXSA:2016-137:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-137:02 advisory. Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001192 advisory. The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001556 advisory. The munlockpagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service NRMLOCK accounting corruption via crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001661)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001661 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003675 advisory. Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of servic...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000648 advisory. Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000850)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000850 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001655 advisory. The x86/fpu Floating Point Unit subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correct...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001156 advisory. The blkcginitqueue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service double free or possibly have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000974 advisory. The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allow...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003613 advisory. btrfsfreeextent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfsprintleaf in a certain ENOENT case, which allows local users to obtain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001634 advisory. The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly hav...

CVE-2021-47780 Macro Expert 4.7 - Unquoted Service Path

Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the improperly configured service path to inject malicious executables that will be run with LocalSystem permission...

CVE-2021-47780

Macro Expert 4.7 is affected by an unquoted service path vulnerability, enabling local users to potentially execute arbitrary code with LocalSystem privileges during service startup. Root cause: improperly configured service path. Impact is high (local exploit). Remediation: ensure the service pa...

CVE-2021-47779

Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the...

CVE-2021-47779 Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation

Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the...

CVE-2021-47779

Dolibarr ERP-CRM 14.0.2 is affected by a stored cross-site scripting (XSS) vulnerability in the ticket creation module. The issue allows a low-privilege user to inject JavaScript that can be executed when an administrator copies the crafted ticket text, with potential privilege escalation. Techni...

CVE-2026-1008

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...