247115 matches found
Debian dsa-6540 : radsecproxy - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6540 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz...
Red Hat: CVE-2026-94422: xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-103631: Heap-based Buffer Overflow
Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-103630: Use After Free
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-104411
Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.17 Description A code execution issue exists in the Java integration of the software. A crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a use...
SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2026:4402-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4402-1 advisory. - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the ColdFusion software platform, related to the failure to eliminate instructions in dynamically executed code, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability in the Adobe Experience Design (Adobe XD) interface development software allows an attacker to execute arbitrary code by performing operations outside of the buffer boundaries in memory.
The vulnerability of the Adobe Experience Design Adobe XD interface development software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the ThreadPoolOptions component in the Piscina library of the Node.js software platform allows a hacker to execute arbitrary code.
The vulnerability of the ThreadPoolOptions component in the Piscina library of the Node.js software platform is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Adobe Connect instant messaging program, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code.
The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21974-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21974-1 advisory. This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other...
SUSE SLES16: emacs / emacs-el / emacs-eln / emacs-info / emacs-nox / emacs-x11 / etc (SUSE-SU-2026:23949-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23949-1 advisory. This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in...
Google Chrome < 154.0.8037.97 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remo...
Debian dsa-6538 : redis - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6538 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6538-1 [email protected] https://www.debian.org/securit...
Fedora 45 : 0ad / GAPDoc / GConf2 / GraphicsMagick / ImageMagick / Io-language / etc (2026-91259c13b9)
The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-91259c13b9 advisory. libxml2 updated to version 2.15.4, compat libxml22.13 added, and rebuilds of packages linking to libxml2. Packages that FTBFS will require the compa...
CVE-2026-93029: Improper Neutralization of Input During Web Page Generation
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...
CVE-2026-93697: Improper Neutralization of Input During Web Page Generation
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...