166254 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-106227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-106421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
PT-2026-107535
A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...
PT-2026-107614
Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, contains issues involving insufficient protection against code injection. This flaw is categoriz...
PT-2026-107533
Name of the Vulnerable Software and Affected Versions @backstage/plugin-techdocs-node versions prior to 1.14.8 @backstage/plugin-techdocs-node versions prior to 1.15.6 @backstage/plugin-techdocs-node versions prior to 2.0.1 Description The @backstage/plugin-techdocs-node package improperly...
ROS-20261007-73-0120
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-93675: Expected Behavior Violation
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion...
CVE-2026-97678: Protection Mechanism Failure
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-97673: Protection Mechanism Failure
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
CVE-2026-104335: Improper Access Control
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...
CVE-2026-88962: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
Linux Distros Unpatched Vulnerability : CVE-2026-106375
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...
OCaml readblock() Code Execution
The vulnerability of the readblock function in the runtime/intern.c file of the OCaml programming language is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-106211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...
PT-2026-107615
Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 Series Switches affected versions not specified Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS...
Mercusys AC12 UART Code Execution
The vulnerability of the UART interface in the microprogramming software of Mercusys AC12 routers lies in the absence of a mechanism to protect the alternative hardware interface. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:4533-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4533-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...
Debian dsa-6549 : liblzma-dev - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6549 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/...