392273 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143055)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143055 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143062)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143062 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parse...
SUSE SLES12: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2026:4801-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4801-1 advisory. - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142678)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142678 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without...
Fortinet FortiSIEM 6.4.x <= 7.2.7 / 7.3.x <= 7.3.5 / 7.4.x <= 7.4.2 / 7.5.x <= 7.5.1 Missing Authorization (FG-IR-26-183)
The version of Fortinet FortiSIEM running on the remote host is 6.4.x through 7.2.7, 7.3.x through 7.3.5, 7.4.x through 7.4.2, or 7.5.x through 7.5.1. It is, therefore, affected by a missing authorization vulnerability: - A missing authorization vulnerability in FortiSIEM GUI may allow an...
CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792514983)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792514983 advisory. - A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a...
Rocky Linux 8 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86842)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686842 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directly...
Rocky Linux 9 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86921)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686921 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directly...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142482)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142482 advisory. In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation slreallocbufs replaces rbuff and updates...
RHEL 9 : expat (RHSA-2026:88247)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88247 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143123)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143123 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAYBACKLOG requests MAYBACKLOG requests can return EBUSY. Handle...
openSUSE 16 Security Update : yt-dlp (openSUSE-SU-2026:22142-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22142-1 advisory. Changes in yt-dlp: Update to version 2026.08.19: utils: floatornone: Catch OverflowError americastestkitchen: Fix season/series extraction apple: Rework...
Rocky Linux 10.2 [CIQ] Security Update: glycin-loaders / glycin-loaders-debuginfo / etc (crlsa-2026_86331)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686331 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block direct...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143090)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143090 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmpgqstarttimer A race condition exists between device teardown...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142692 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142740)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142740 advisory. In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-114729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcubewashtml inspected the SVG SMIL animation attributes...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142543)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142543 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...
CentOS Linux 7.9 [CIQ] Security Update: bpftool / kernel / kernel-abi-whitelists / kernel-debug / etc Multiple Vulnerabilities (ciqsa-2026_1657)
The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261657 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ CentOS Bridge 7.9. It addresses 4 CVEs: CVE-2026-74705, CVE-2026-99999, CVE-2026-6400...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142487 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142675)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142675 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if t...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143091)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143091 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142516)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142516 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143063)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143063 advisory. In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143102)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143102 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143083)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143083 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142539 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143064)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143064 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142687)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142687 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142475)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142475 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143081 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143120)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143120 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142518)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142518 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packetsetring temporarily detaches...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143101)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143101 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143074)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143074 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142727 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143073)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143073 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip...
Linux Distros Unpatched Vulnerability : CVE-2026-96778
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode in src/libImaging/JpegEncode.c can call jpegwritemarker for a JPEG COM comment wh...
Linux Distros Unpatched Vulnerability : CVE-2026-96642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek...
RHEL 8 : rsyslog (RHSA-2026:87408)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87408 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142726)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142726 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a...
AlmaLinux 10 : mariadb11.8 (ALSA-2026:84799)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84799 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Memory corruption...
Rocky Linux 9 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_85929)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685929 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS proxy...
Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_85774)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685774 advisory. kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-5319...
RHEL 9 : libkcapi (RHSA-2026:87712)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87712 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...
openSUSE 16: grok-build / grok-build-bash-completion / etc (openSUSE-SU-2026:22130-1)
"The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22130-1 advisory. Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure boo1285155 - CVE-2026-109350: gix-pack ofs-delta...
Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h15 / 6.3.x < 6.3.3-h16 Local DoS (CVE-2026-0314)
The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h15, or 6.3.x prior to 6.3.3-h16. It is, therefore, affected by a denial of service vulnerability: - A type confusion vulnerability in Palo Alto Networks GlobalProtect ap...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142673)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142673 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report...
Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792704664)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792704664 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software...
CentOS Linux 7 [TuxCare] Security Update: squid / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (CENTOS7:CLSA-2026:1790851347)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1790851347 advisory. - An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service...