253076 matches found
CVE-2026-75997
This CVE ID is rejected and does not represent an active vulnerability entry.
CVE-2026-113709
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data directories at a repository-controlled location...
CVE-2026-95168
A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...
USN-8945-1: XZ Utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...
USN-8945-1 xz-utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...
CVE-2026-98606
A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
Arbitrary Code Injection
Overview @vitest/mocker is a Vitest module mocker implementation Affected versions of this package are vulnerable to Arbitrary Code Injection via the redirect mock handling in interceptorPlugin.ts and insufficient escaping in createManualModuleSource in utils.ts. In the redirect path, a URL...
Cisco TelePresence Video Communication Server Expressway: Code Injection Vulnerability
Cisco TelePresence Video Communication Server Expressway has a code injection vulnerability. This vulnerability stems from a code injection issue, which may allow for the execution of arbitrary code...
NoMachine encryption issue vulnerabilities
NoMachine version 9.7.3 has an encryption-related vulnerability. This vulnerability stems from insufficient entropy during the generation of credentials in the Redis database access authentication mechanism. Attackers need to execute low-privilege code on the target system first. This may allow...
Pillow buffer error vulnerability
Versions 9.4.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises when the ImagingJpegEncode function calls jpegwritemarker for JPEG COM annotations; specifically, when the ICC configuration file fills the encoding buffer exactly to 65536 bytes. Libjpeg write...
Lagoon command injection vulnerability
Versions prior to Lagoon 2.33.2 contain a command injection vulnerability. This vulnerability arises because the ssh service in Lagoon Core allows attackers with Lagoon user accounts to execute arbitrary code, potentially leading to privilege escalation...
UBUNTU-CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
CVE-2026-93119
A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...
CVE-2026-90417
A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...
CVE-2026-93163
A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...