CVE-2026-14269: Heap-based Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary...

EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-3925)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.10 advisory. - Buffer overflow in the dissectgsmrlcmacdownlink function in epan/dissectors/packet-gsmrlcmac.c in the...

EulerOS 2.0 SP15 : libtiff (EulerOS-SA-2026-3922)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1...

Aruba ClearPass Policy Manager 6.14.x < 6.14.1 Path Traversal (HPESBNW05158)

The version of Aruba ClearPass Policy Manager installed on the remote host is 6.14.x prior to 6.14.1. It is, therefore, affected by a path traversal vulnerability as referenced in the HPESBNW05158 advisory. - An authenticated path traversal vulnerability exists in the command line interface of...

EulerOS 2.0 SP15 : libtiff (EulerOS-SA-2026-3988)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1...

Microsoft Office Pointer Manipulation Code Execution

The vulnerability of the application for managing Windows Security formerly Windows Security Center security and privacy settings on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

[SECURITY] [DSA 6549-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2026 https://www.debian.org/security/faq -...

Insecure Temporary File

Overview org.lz4:lz4-java is a Java port of the LZ4 compression algorithm and the xxHash hashing algorithm. Affected versions of this package are vulnerable to Insecure Temporary File in the process that extracts and loads the native library via net.jpountz.util.Native.load. An attacker can execu...

Insecure Temporary File

Overview Affected versions of this package are vulnerable to Insecure Temporary File in the process that extracts and loads the native library via net.jpountz.util.Native.load. An attacker can execute arbitrary code by pre-creating a malicious file in a shared temporary directory, causing the...

EUVD-2026-92767

Ghost: Remote Code Execution via Theme Translation Files...

GHSA-5JJJ-9XC3-RM56 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Summary hydra-optuna-sweeper accepted a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolved it with the lower-level hydra.utils.getmethod API, and later invoked the returned callable. Hydra's object-lookup helpers intentionally trust their input and do not apply the...

CVE-2026-78030

A flaw was found in Perl DBI's bundled DBD::DBM driver. This vulnerability allows arbitrary code execution because unvalidated connection attributes, such as dbmtype and dbmmldbm, are passed directly to Perl's module loader without verification. An attacker who can influence database connection...

CVE-2026-106441

A flaw was found in hydra-core. An attacker who supplies or controls a malicious logging configuration can trigger arbitrary code execution by specifying unauthorized Python classes or factory functions. Because Hydra passes logging configuration directly to Python's logging system without...