Apache Ambari 3.0.0 MpackManager Path Traversal

Apache Ambari version 3.0.0 MpackManager contains a path traversal vulnerability that allows an authenticated administrator to write arbitrary files outside the management-pack staging directory. !/usr/bin/env python Apache Ambari 3.0.0 MpackManager Path Traversal Arbitrary File Write Vendor: The...

CVE-2023-22793: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the…

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

PT-2026-132876

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description An integer overflow occurs during editing processes, which could allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted...

PT-2026-132882

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description A use after free issue exists in the FileSystem component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially...

CVE-2026-61645: docat-org docat: Docat is a tool for hosting versioned static documentation

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

MiracleLinux 9 : dotnet10.0-10.0.113-1.el9_8.ML.1 (AXSA:2026-2150:21)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2150:21 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Servic...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection vulnerability. This vulnerability stems from improper control over code generation and may allow remote attackers to execute arbitrary code...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a code injection vulnerability. This vulnerability stems from improper neutralization of special elements used in OS commands, potentially allowing remote attackers to execute arbitrary code...

CVE-2026-96198: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

PT-2026-132800

Name of the Vulnerable Software and Affected Versions MLflow affected versions not specified Description Remote attackers can execute arbitrary code on affected installations due to improper validation of user-supplied data during the parsing of pickle files. This leads to the deserialization of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-147021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147021 advisory. LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a lin...

MiracleLinux 8 : dotnet10.0-10.0.113-1.el8_10 (AXSA:2026-2163:22)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2163:22 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Servic...

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2026:1793034487)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793034487 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c...

PT-2026-132875

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description Memory corruption occurs in the DOM Document Object Model, which is the programming interface for HTML and XML documents. This issue allows a remote attacker to potentially execute...

PT-2026-132869

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description Improper input validation in Skia allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome t...

PT-2026-132870

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description Improper input validation in the V8 engine allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-132873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description Memory corruption occurs in the Quota component, which could allow a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTM...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147022 advisory. An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different maste...

MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickle files...

docat-org docat arbitrary file upload vulnerability

Docat-org: Versions prior to 1.6.0 of Docat contain an arbitrary file upload vulnerability. This vulnerability arises because the Upload API fails to validate the path or type of uploaded files, potentially allowing unauthorized file uploads. Such uploads may overwrite sensitive configuration fil...