166643 matches found
Exploit for CVE-2026-10036
CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT...
Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut
PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...
RLSA-2026:60394 Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow CVE-2026-11979 For more details about the security issues, including the impact, a CVSS score,...
libxml2 security update
An update is available for libxml2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...
EUVD-2026-67714
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...
CVE-2026-82078
CVE-2026-82078 is an unsafe dynamic class loading vulnerability (CWE-470, CVSS 9.4 Critical) in the database connection utilities of PaperCut NG and PaperCut MF . The application instantiates database driver classes from configurable names without an allowlist, allowing arbitrary Java bytecode to...
CLSA-2026-1787916987 Fix CVE(s): CVE-2024-33871, CVE-2024-46951, CVE-2024-46953, CVE-2024-46956
SECURITY UPDATE: arbitrary code execution via the opvp Driver parameter - debian/patches/CVE-2024-33871.patch: refuse a Driver change once LockSafetyParams is set, and report the Driver length without the trailing NUL, in contrib/opvp/gdevopvp.c. - CVE-2024-33871 SECURITY UPDATE: unchecked...
Vulnerabilities in Microsoft Exchange servers
Microsoft has identified vulnerabilities in Exchange Server. A malicious individual can exploit these vulnerabilities to carry out a Denial-of-Service attack, impersonate other users, gain elevated privileges, execute arbitrary code, and/or access sensitive data. For successful exploitation, the...
CVE-2026-42007
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...
CVE-2026-42007
CVE-2026-42007 affects Dovecot mail server. An attacker with valid credentials can trigger a use-after-free in the mail editing code by submitting a Sieve script using the editheader extension . This leads to memory leak and potential memory corruption during mail delivery, which can crash the de...
CVE-2026-18393 Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor
A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...
CVE-2026-18393
A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...
CVE-2026-18393
A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...
CVE-2026-78032
SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...
Multiple vulnerabilities in SOY series
Overview SOY series provided by Tsuyoshi Saito contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2026-73827, CVE-2026-77838, CVE-2026-78238 Deserialization of Untrusted Data CWE-502 - CVE-2026-78032 Shogo Kumamaru of LAC Co., Ltd. reported these vulnerabilities to...
PT-2026-83352
Name of the Vulnerable Software and Affected Versions TL-MR100 version 3.20 Description A pre-authentication stack-based buffer overflow occurs in the http gdpr decrypt function due to insufficient bounds checking of encrypted requests. An adjacent unauthenticated attacker with access to the web...
CVE-2026-42007: Use After Free
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...