250337 matches found
CVE-2026-19582
Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy...
UBUNTU-CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582
Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy...
EUVD-2026-63197
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write. Mitigation Do not open unknown files and/or files from an untrusted source using binutils...
CVE-2026-76252
creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
GHSA-WGRP-2W9F-FMVG vulnerabilities
Vulnerabilities for packages: exim...
GHSA-VV88-699V-W5RH vulnerabilities
Vulnerabilities for packages: wget...
CVE-2026-58472 vulnerabilities
Vulnerabilities for packages: wget...
EUVD-2026-63135
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the filename argument passed to readfile, savetofile, or runpythonfile tool actions...
EUVD-2026-62972
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handlezmqrecv coroutine in lmdeploy/pytorch/disagg/conn/engineconn.py reads peer-to-peer cache-free requests with recvpyobj, which deserializes the received bytes with pickle.loads, and the isinstance check against...
EUVD-2026-62960
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk AI Toolkit...
EUVD-2026-62921
In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...
EUVD-2026-62922
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer REST API and execute arbitrary code. The vulnerability is possible because the REST API does not require an assigned role for the request and do...
EUVD-2026-62915
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...
postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path
An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...
postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...
PT-2026-78905
A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of...
PT-2026-79222
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An out-of-bounds read allows a local attacker to execute arbitrary code. An out-of-bounds read occurs when a program reads data past the end of the intended buffer,...
PT-2026-79161
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap...