218278 matches found
PT-2026-55437
It was discovered that LibVNCServer incorrectly handled the Tight decoder in libvncclient. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code...
PT-2026-57584
Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.1.0 through 2.6.20 OpenVPN versions 2.7 alpha1 through 2.7.4 Description An off-by-one buffer write occurs during NTLM proxy authentication. This 1-byte buffer overrun can be triggered by a malicious proxy server sending a...
CVE-2026-57623: Improper Validation of Specified Quantity in Input
Unauthenticated Arbitrary Code Execution in W3 Total Cache = 2.9.4 versions...
PT-2026-55287
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSP file format parser. A double-free condition, which occurs when a program attempts to free the same memory location twice, happens in the read layer block function when...
PT-2026-55323
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.0 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 Description An Out-of-bounds Write issue exists in the CLI, where an...
The vulnerability of the Chromoting component in Google Chrome browsers on macOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Chromoting component in Google Chrome browsers on macOS operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to memory corruption beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Mozilla Firefox < 152.0.4
The version of Firefox installed on the remote Windows host is prior to 152.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-62 advisory. - Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that wi...
CVE-2026-38972: Uncontrolled Search Path Element
Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...
VulnCheck KEV: CVE-2026-48282
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user...
CVE-2026-58381: Double Free
A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution...
PT-2026-55339
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.0 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 Description An Out-of-bounds Write issue exists where an unauthenticated...
PT-2026-55312
Name of the Vulnerable Software and Affected Versions Notepad3 versions prior to 6.25.822.2 Description A DLL search-order hijacking issue exists in the About-dialog code path within src/Notepad3.c. The application uses the LoadLibrary function to load MSFTEDIT.DLL using a bare name. This allows ...
The vulnerability of the Teamcenter product lifecycle management system, related to insufficient protection of the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Teamcenter product lifecycle management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Cacti network monitoring software lies in errors during the verification of the cryptographic signature, allowing a hacker to execute arbitrary code.
The vulnerability of the Cacti network monitoring software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
PT-2026-55439
It was discovered that cifs-utils incorrectly dropped root privileges before looking up user information. A local attacker could possibly use this issue to execute arbitrary code as the root user...
AlmaLinux 9 : mariadb:11.8 (ALSA-2026:33481)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33481 advisory. mariadb: MariaDB Server: Arbitrary code execution via wsrepnotifycmd CVE-2026-49261 Bug Fixes and Enhancements: AlmaLinux9 tracker Rebase Galera to 26.4.27...
CVE-2026-14407
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
MAL-2026-6711 Malicious code in twrap-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9903cc9163ada9951dee4ee1f364648cac0e492df9a32582ad3ed8303d29231 twraptool/init.py defines two public functions, formatblock and aligncolumns, whose real behavior is to fetch a Python file from...