211547 matches found
xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow
A flaw was found in the glamorfontget function of the xorg-x11-server. This vulnerability, a heap buffer overflow, occurs when the server processes a specially crafted PCF font file where individual glyph metrics exceed the declared maximum bounds. An authenticated X client can exploit this by...
PT-2026-69396
Name of the Vulnerable Software and Affected Versions libril sem.so versions prior to SMR Aug-2026 Release 1 Description A stack-based buffer overflow exists in the libril sem.so library. This flaw allows privileged local attackers to execute arbitrary code. A stack-based buffer overflow occurs...
Linux Distros Unpatched Vulnerability : CVE-2026-59087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerabili...
PT-2026-69952
Name of the Vulnerable Software and Affected Versions trustyai-service-operator affected versions not specified Description A flaw in the LMEvalJob controller allows an authenticated user within the cluster to bypass security policies by configuring a sidecar container. This bypass enables the...
The vulnerability of the api/store_javascript_cache.php file of the BerqWP plugin allows a hacker to execute arbitrary code.
The vulnerability of the api/storejavascriptcache.php file of the BerqWP plugin is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Syslog Server server, a management tool for virtual infrastructure in VMware vCenter Server, allows a attacker to execute arbitrary code.
The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
ROS-20260810-73-0034
The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the `index_local_file_headers_within_bounds()` function in the `libclamav/unzip.c` file of the ClamAV antivirus program allows a hacker to execute arbitrary code and cause service failure.
The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.
The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the imageUploadHandle() function in the WPBookit plugin, a content management system for WordPress websites, allows a hacker to execute arbitrary code.
The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the fetch_gravatar_from_remote() function in the Breeze Cache plugin of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Debian dla-4728 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4728 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4728-1 [email protected]...
PT-2026-69968
Name of the Vulnerable Software and Affected Versions RHOAI training-operator affected versions not specified Description A flaw allows users with standard edit or admin roles in any Kubernetes namespace to escalate privileges. By creating training jobs, an attacker can impersonate service...
PT-2026-69962
Name of the Vulnerable Software and Affected Versions Feast operator affected versions not specified Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to...
Debian dla-4730 : libyaml-syck-perl - security update
The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4730 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4730-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-19387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation ...
The vulnerability of the simple-file-list plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the simple-file-list plugin in the WordPress content management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2026-69481
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSD file format plugin where an unsigned integer underflow occurs in the block rem variable when opening a specially crafted .psd image file. This underflow causes parser...
PT-2026-69964
Name of the Vulnerable Software and Affected Versions Feast affected versions not specified Description Improper deserialization of user-defined functions UDFs stored in the registry, which are serialized using the dill library, allows for arbitrary code execution. In default configurations, a...
VulnCheck KEV: CVE-2026-59310
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code...