PT-2026-57448

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

PT-2026-57457

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57469

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

UBUNTU-CVE-2026-2049

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

Linux Distros Unpatched Vulnerability : CVE-2020-28618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead ...

CVE-2023-28618

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin = 1.16 versions...

CVE-2022-28618

A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that could allow an attacker to execute arbitrary commands on a Nimble appliance. HPE has made the following...

Adobe Animate 21.x < 21.0.7 Multiple Vulnerabilities (APSB21-50)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 21.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-50 advisory. - Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability. An...

CVE-2023-28618

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin = 1.16 versions...

CVE-2023-28618

CVE-2023-28618 is a CSRF vulnerability in the WordPress plugin “Enhanced Plugin Admin” (versions

WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF)

Software Enhanced Plugin Admin Type Plugin Vulnerable versions = 1.16 Fixed in 1.17 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28618 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e54f4921d85f Credits Yuki Haruma...

CVE-2022-28618

creationtimestamp| type| source ---|---|--- 2022-05-21 00:31:14+00:00| seen| https://t.me/cibsecurity/43102...

CVE-2022-28618

A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that could allow an attacker to execute arbitrary commands on a Nimble appliance. HPE has made the following...

CVE-2022-28618

CVE-2022-28618 concerns HPE Nimble Storage products (Hybrid Flash Arrays, All Flash Arrays, and Secondary Flash Arrays) where a command-injection vulnerability could allow an attacker to execute arbitrary commands on a Nimble appliance. The underlying issue is a vulnerability in the storage appli...

CVE-2020-28618

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28618

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28618

CGAL CGAL-5.1.1 Nef polygon-parsing contains multiple memory access and out-of-bounds read vulnerabilities (OOB reads) in various PM/SM/SNC IO parsers, potentially enabling code execution when processing crafted Nef data. CVEs include CVE-2020-28601 through CVE-2020-28636 (and related 2020-3563x/...

CVE-2021-28618

Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue...

CVE-2021-28618 Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure

Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue...

CVE-2021-28618

Adobe Animate 21.0.6 and earlier are affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could disclose sensitive memory information in the context of the current user, and known exploits require that a victim opens a malicious file. ...