250272 matches found
PT-2026-85152
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue...
Adobe Lightroom Classic < 15.5 Multiple Arbitrary code execution (APSB26-94)
The version of Adobe Lightroom Classic installed on the remote Windows host is prior to 15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-94 advisory. - Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path...
ROS-20260824-73-0005
The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-80886
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...
EUVD-2025-210769
In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...
ALSA-2026:58927 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
ALSA-2026:58938 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
Wazuh Cluster Unmerge Info Process Files Code Execution
The vulnerability of the cluster.unmergeinfo and processfilesfromworker functions of the security monitoring and threat detection platform Wazuh is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary cod...
GNU Emacs: Arbitrary code execution
Background GNU Emacs is the extensible, customizable, self-documenting real-time display editor. Description A vulnerability has been discovered in GNU Emacs. Please review the CVE identifier referenced below for details. Impact An attacker could achieve arbitrary code execution by tricking a use...
PT-2026-81115
Name of the Vulnerable Software and Affected Versions MCP Context Forge versions prior to 1.0.2 Description The python sandbox server sub-project in MCP Context Forge contains a sandbox bypass in its RestrictedPython implementation. The issue occurs because raw getattr is exposed through safe...
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...
CVE-2026-78367: Improper Control of Generation of Code
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...
CVE-2026-52490
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...
ROS-20260824-73-0028
The vulnerability in MariaDB is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260824-73-0030
The vulnerability in Mariadb 11.4 is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
PT-2026-80994
Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...
EUVD-2026-65144
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...
CVE-2026-52490: Improper Control of Generation of Code
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...