254114 matches found
CVE-2026-75747
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-21270
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-75997
This CVE ID is rejected and does not represent an active vulnerability entry.
CVE-2026-113709
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data directories at a repository-controlled location...
CVE-2026-95168
A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...
USN-8945-1: XZ Utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...
USN-8945-1 xz-utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution...
CVE-2026-98606
A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
Arbitrary Code Injection
Overview @vitest/mocker is a Vitest module mocker implementation Affected versions of this package are vulnerable to Arbitrary Code Injection via the redirect mock handling in interceptorPlugin.ts and insufficient escaping in createManualModuleSource in utils.ts. In the redirect path, a URL...
Cisco TelePresence Video Communication Server Expressway: Code Injection Vulnerability
Cisco TelePresence Video Communication Server Expressway has a code injection vulnerability. This vulnerability stems from a code injection issue, which may allow for the execution of arbitrary code...
NoMachine encryption issue vulnerabilities
NoMachine version 9.7.3 has an encryption-related vulnerability. This vulnerability stems from insufficient entropy during the generation of credentials in the Redis database access authentication mechanism. Attackers need to execute low-privilege code on the target system first. This may allow...
Lagoon command injection vulnerability
Versions prior to Lagoon 2.33.2 contain a command injection vulnerability. This vulnerability arises because the ssh service in Lagoon Core allows attackers with Lagoon user accounts to execute arbitrary code, potentially leading to privilege escalation...
Pillow buffer error vulnerability
Versions 9.4.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises when the ImagingJpegEncode function calls jpegwritemarker for JPEG COM annotations; specifically, when the ICC configuration file fills the encoding buffer exactly to 65536 bytes. Libjpeg write...
CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
UBUNTU-CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...