162564 matches found
CVE-2026-85486: Improper Neutralization of Directives in Dynamically Evaluated Code
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...
PT-2026-108226
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description A protection mechanism failure allows a remote authenticated attacker to execute arbitrary code. Recommendations Upda...
PT-2026-108274
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overrun exists in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker can send a specially crafted TDS PRELOGIN packet to a network monitored by a...
PT-2026-108223
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An attacker with administrative privileges and access to the local management interface can execute arbitrary code...
PT-2026-108266
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A path traversal issue in the Sniffer component allows a remote attacker to execute arbitrary code. Path traversal is a flaw that allows an attacker to access files and...
PT-2026-108240
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...
CVE-2026-82335: Improper Restriction of Operations within the Bounds of a Memory Buffer
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...
CVE-2026-101024: Relative Path Traversal
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...
PT-2026-108210
Name of the Vulnerable Software and Affected Versions Satel Netco Design versions prior to 2.1.7 Description A relative path traversal issue exists in the data export functionality. This allows an authenticated user with Viewer privileges to write attacker-influenced content to file system...
PT-2026-108285
Name of the Vulnerable Software and Affected Versions Eye of GNOME eog affected versions not specified Description A heap-based buffer overflow occurs in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker can exploit this by enticing a use...
PT-2026-108708
Name of the Vulnerable Software and Affected Versions PraisonAI affected versions not specified Description The plugin manager loads and executes arbitrary .py files from the .praisonai/plugins/ directories located at both the project level and the user home. This occurs through the use of...
PT-2026-108174
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based buffer overflow exists in the MongoDB protocol parser. A remote attacker can trigger memory corruption by sending a specially crafted MongoDB SCRAM username with ...
PT-2026-107957
Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...
PT-2026-107868
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...
ROS-20261008-73-0326
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0318
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0068
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0297
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...