252979 matches found
CVE-2026-79892
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-79881
An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying...
CVE-2026-79862
Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a...
CVE-2025-65200
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...
CVE-2026-115504 CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...
CVE-2026-115504
Versions of CFITSIO through 4.7.0 are vulnerable to an out-of-bounds write in the ffgcls2() function located in getcols.c. The root cause is that the software trusts attacker-controlled heap descriptor lengths for variable-length string columns. By supplying a crafted FITS file , an attacker can ...
CVE-2026-115504
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...
CVE-2026-115504 CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...
EUVD-2026-108336
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...
CVE-2026-79892 Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-79892 Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-79892
A memory corruption vulnerability exists in AOS-8 that can be triggered via an authenticated local attack. Successful exploitation could lead to arbitrary code execution . While the impact is high, specific technical details regarding the root cause, affected components, or remediation steps are ...
CVE-2026-79881
Technical details for CVE-2026-79881 are not publicly available in the provided documents. While the title mentions an Authentication Bypass Leading to Remote Code Execution in AOS-8 , no specific root cause, impacted version, or remediation steps are provided. Monitor for updates.
Deserialization of Untrusted Data
Overview pylint is a Python static code analysis tool which looks for programming errors, helps enforcing a coding standard, sniffs for code smells and offers simple refactoring suggestions. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via loadresults in...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
Important: Red Hat Security Advisory: postgresql16-pgvector security update
An update for postgresql16-pgvector is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
Important: Red Hat Security Advisory: postgresql18-pgvector security update
An update for postgresql18-pgvector is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
DEBIAN-CVE-2026-97631
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...
CVE-2026-97631
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...