270341 matches found
PT-2026-79103
Name of the Vulnerable Software and Affected Versions Omada gateways affected versions not specified Description A pre-authentication OS command injection exists in Omada gateways configured as an OpenVPN Server. The issue stems from insufficient validation of client-supplied data during the...
PT-2026-79180
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A use-after-free issue exists that could allow a remote attacker to execute arbitrary code. Use-after-free is a memory corruption flaw that occurs when an application...
PT-2026-79268
Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.20 Description Unauthenticated remote attackers can execute arbitrary code due to the incorrect identification of ?php blocks and the mishandling of certain cases, such as the presence of a character, within the var...
PT-2026-79223
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A format string vulnerability allows a remote attacker to execute arbitrary code. A format string vulnerability occurs when an application fails to properly validate input...
PT-2026-79231
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow occurs during size computation, which could allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information abo...
PT-2026-79248
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a remote attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer...
PT-2026-79265
A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...
VulnCheck KEV: CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Malicious code in internment (crates.io)
internment 0.8.7 was published to crates.io from the same maintainer account droundy as the trojanized arrayref and append-only-vec releases, which appears to be compromised. The release adds a dependency on an attacker-controlled crate whose build script downloads and executes an...
The vulnerability of the PL/Per extension interface of the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the PL/Per extension interface of the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the pg_stat_statements extension in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgstatstatements extension in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Malicious code in proc_macro1 (crates.io)
proc-macro1 is a typosquat of proc-macro2 published to crates.io by the account 'dtolney', impersonating David Tolnay dtolnay. Its metadata forges authors 'David Tolnay ' and points repository at a nonexistent github.com/dtolnay/proc-macro1. The library source is a copy of proc-macro2 so dependen...
Oracle Linux 10 : php8.4 (ELSA-2026-56969)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56969 advisory. 8.4.24-2 - rebase to 8.4.24 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2026-76218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the setBeanClassLoader process. An attacker can execute arbitrary code by injecting malicious serialized data into the INTMESSAGE.MESSAGECONTENT field. This is only exploitable if the deserializatio...
KLA91233 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Chromoting can be...
cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution
cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution...
CVE-2026-76850
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handlezmqrecv coroutine in lmdeploy/pytorch/disagg/conn/engineconn.py reads peer-to-peer cache-free requests with recvpyobj, which deserializes the received bytes with pickle.loads, and the isinstance check against...
CVE-2026-76345
In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Representational State Transfer REST API to write files to locations that the user account running Splunk Enterprise can writ...