PT-2026-58819

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An incorrect authorization issue allows for arbitrary code execution within the context of the current user. This flaw can be exploited without requiring any user interaction...

CVE-2026-51808

OpenHTJ2K is affected by CVE-2026-51808, a buffer overflow in versions prior to 0.18.4 that can lead to arbitrary code execution. The issue arises in openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded within source/core/interface/decoder....

PT-2026-58705

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description Adobe Experience Manager contains a Server-Side Request Forgery SSRF flaw, which occurs when a server is tricked into making requests to an unintended location. This issue...

PT-2026-58829

Name of the Vulnerable Software and Affected Versions Illustrator affected versions not specified Description An Untrusted Search Path issue exists that could allow arbitrary code execution within the context of the current user. This occurs when the application searches for required files in an...

PT-2026-58802

Name of the Vulnerable Software and Affected Versions Media Encoder affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer, which can lead to memory corruption. This issue could result in arbitrary code...

CVE-2026-51807

Heap-based out-of-bounds write in j2kprecinctsubband::parsepacketheader in OpenHTJ2K versions 0.18.3 and earlier fixed in v0.18.4 caused by missing bounds validation before coding-pass lengths are written to j2kcodeblock::passlength128. A crafted JPEG 2000 codestream containing malformed PPM pack...

PT-2026-58684

Name of the Vulnerable Software and Affected Versions Audition affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, requiring user interaction f...

Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-76)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-76 advisory. - Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Securi...

Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)

The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...

RockyLinux 10 : perl-DBI (RLSA-2026:38513)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38513 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

openSUSE 16 Security Update : perl-DBI (openSUSE-SU-2026:21293-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21293-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead...

APSB26-72 : Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure...

KLA91146 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-55944 Exploitation CVE list CVE-2026-55944 critical KB list Solution Install necessary updates from the KB...

vitest: Vitest: Arbitrary code execution via crafted browser-runner URL

A flaw was found in Vitest, a testing framework. In Vitest Browser Mode, a remote attacker could craft a specific browser-runner URL that, when visited, would allow the execution of arbitrary JavaScript code within the Vitest server. This vulnerability could also lead to the recovery of the...

vitest: Vitest: Arbitrary code execution and information disclosure via path traversal

A flaw was found in Vitest, a testing framework. On Windows, the Vitest UI/API server incorrectly handled file serving, which could allow an attacker to read sensitive files outside the project directory. Additionally, exposed API features could be exploited to execute arbitrary scripts, leading ...

Malicious code in gamified-trading-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24facab67c0c7bd4775a6081ee54f4fab3fa7a5dd93b52a87f1111088e5e501 The package advertises itself as a trading-gamification library XP, leaderboards, updateProgress/getLeaderboard but its source contains none of those...

CVE-2026-48363

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

MAL-2026-10470 Malicious code in @uw010010/vite-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280687ad50e03b43bf7f26df6afb1a8fb794eb486c126b2368f37c6b76625318 The package @uw010010/vite-tree impersonates the upstream vite package: its package.json verbatim copies vite's author 'Evan You', description...

Malicious code in node-path-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbc52a88818bccd5602eb556ea4bf089dac66c44a2bb1ecbd6fddd6723e9d1d node-path-addon presents itself as an extension of the Node.js built-in 'path' module. Its main entry path.js delegates by executing...