Adobe Bridge permission licensing and access control vulnerabilities

Adobe Bridge is a digital asset management and file organization tool developed by Adobe, a company based in the United States. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, allowing...

PT-2026-66617

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description A heap use-after-free issue exists in the TransferSubscriptions service. This occurs when the application continues to use a pointer after the memory it points to has been freed, which may...

JetBrains GoLand < 2026.2 Multiple Vulnerabilities

The version of JetBrains GoLand installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration CVE-2026-64802 - In...

VulnCheck KEV: CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

PT-2026-66542

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.4.3 Description Banks parses Tool JSON objects from the rendered body of % completion % blocks and resolves the import path field using importlib.import module... and getattr... to identify the callable for tool calls...

PT-2026-66482

Name of the Vulnerable Software and Affected Versions IBM Aspera Desktop App versions 1.0.5 through 1.0.19 Description An issue exists that allows arbitrary code execution by loading DLL files during the application start-up process. Recommendations At the moment, there is no information about a...

Adobe Format Plugins Buffer Overflow Vulnerability

Adobe format plugins are a series of format extension plugins developed by the American company Adobe. Adobe format plugins have a buffer overflow vulnerability, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30873)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

Adobe Bridge out-of-bounds write vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

ALSA-2026:48703 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

JetBrains WebStorm < 2026.2 Multiple Vulnerabilities

The version of JetBrains WebStorm installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - Arbitrary code execution was possible before granting project trust via project-local linter tooling. CVE-2026-64804 - Arbitrary code execution was possible...

Tenda TX9 sub_42EEE0 function buffer overflow vulnerability

Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub42EEE0 function in the file/goform/SetStaticRouteCfg, which fails to properly validate the length of the input...

Adobe Bridge authorization issue vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to authorization issues, and attackers can exploit these vulnerabilities to execute arbitrary code within the context of the current user...

RockyLinux 9 : vim (RLSA-2026:47982)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47982 advisory. vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrin...

Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

RHEL 9 : vim (RHSA-2026:47982)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47982 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

CVE-2026-13305

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-13309

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

CVE-2026-13307

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...