211572 matches found
PT-2026-69962
Name of the Vulnerable Software and Affected Versions Feast operator affected versions not specified Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to...
Debian dla-4728 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4728 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4728-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-19387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation ...
The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.
The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the fetch_gravatar_from_remote() function in the Breeze Cache plugin of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the `index_local_file_headers_within_bounds()` function in the `libclamav/unzip.c` file of the ClamAV antivirus program allows a hacker to execute arbitrary code and cause service failure.
The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of the simple-file-list plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the simple-file-list plugin in the WordPress content management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the imageUploadHandle() function in the WPBookit plugin, a content management system for WordPress websites, allows a hacker to execute arbitrary code.
The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-69964
Name of the Vulnerable Software and Affected Versions Feast affected versions not specified Description Improper deserialization of user-defined functions UDFs stored in the registry, which are serialized using the dill library, allows for arbitrary code execution. In default configurations, a...
VulnCheck KEV: CVE-2026-59310
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code...
PT-2026-69425
Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.6.9 Description An unauthenticated attacker can execute arbitrary code by leveraging the ajax calc feature within the calc plugin. Recommendations Update to version 4.6.9 or later. As a temporary workaround, restrict...
Linux Distros Unpatched Vulnerability : CVE-2026-59090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a...
The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the prepare_form() function in the acfe_module_form_front.render plugin: This vulnerability allows a hacker to execute arbitrary code.
Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the openssl_private_decrypt() function in the WPvivid Backup & Migration plugin of the WordPress content management system allows for the execution of arbitrary code and gives full control over the website.
The vulnerability of the opensslprivatedecrypt function in the WPvivid Backup & Migration plugin of the WordPress content management system is related to the ability to download unlimited files of a dangerous type. Exploiting this vulnerability allows an attacker, operating remotely, to execute...
CVE-2026-3276 affecting package python3 for versions less than 3.12.9-14
CVE-2026-3276 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...
[SECURITY] [DSA 6422-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6422-1 [email protected] https://www.debian.org/security/ Andres Salomon August 08, 2026 https://www.debian.org/security/faq -...
SUSE SLES15 Security Update : libssh2_org (SUSE-SU-2026:3526-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3526-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598:...
CVE-2026-6067
A flaw was found in Netwide Assembler NASM. This heap buffer overflow vulnerability, stemming from insufficient bounds checking, allows a user to execute arbitrary code by assembling a specially crafted malicious assembly .asm file. Successful exploitation can lead to unauthorized command...
PT-2026-69187
Name of the Vulnerable Software and Affected Versions INQUIRELAB mcp-bridge-api versions up to b30a82aa1d1d1139e0de846c41c8aadee6e06114 Description A command injection issue exists in the Servers Endpoint component within the mcp-bridge.js file. A remote attacker can exploit this by manipulating...