PT-2026-79221

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

PT-2026-79170

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow allows a local attacker to execute arbitrary code. An integer underflow occurs when an arithmetic operation results in a value smaller than t...

PostgreSQL Code Execution

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PostgreSQL Code Execution

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Deserialization of Untrusted Data

Overview org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the JobParameterDeserializer. An attacker can execute arbitrary code by...

PT-2026-79006

Name of the Vulnerable Software and Affected Versions @cgauge/yaml npm package affected versions not specified Description An issue exists where attackers can execute arbitrary JavaScript by embedding a custom !js YAML tag. During document parsing, the construct callback unconditionally calls the...

PT-2026-78904

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise...

Deserialization of Untrusted Data

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization. An attacker can execute arbitrary code by submitting a crafted GraphQL request containing...

PT-2026-78885

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.46.1 Description Opening a specially crafted PE Portable Executable file can lead to arbitrary code execution. This occurs due to a stack buffer overflow out of bounds write within the rsrc print name function...

PT-2026-79155

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a local attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-79178

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

CVE-2026-76833: Improper Neutralization of Directives in Dynamically Evaluated Code

@cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval on attacker-supplied string values during document parsing. Any application...

CVE-2026-16922: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-76022: Heap-based Buffer Overflow

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PostgreSQL EXTRACT Code Execution

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

PostgreSQL tsvector tsquery Code Execution

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PostgreSQL pg_restore_attribute_stats() Code Execution

The vulnerability of the pgrestoreattributestats function in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

AlmaLinux 10 : php8.4 (ALSA-2026:56969)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:56969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...

MiracleLinux 9 : perl-DBI-1.643-9.el9_8.3 (AXSA:2026-1593:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1593:02 advisory. DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-14380 DBI: DBI: Heap overflow when preparsing SQL statements wit...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...