454288 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-89091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexica...
ROS-20261009-73-0458
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-107725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization chec...
CVE-2026-92705: Improper Neutralization of Null Byte or NUL Character
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
VulnCheck KEV: CVE-2026-91136
The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback SVGAnimatorController::indexpermission...
The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2026-78796
The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router (v1.3.241114.024540 and before) contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is located in the www extbackslash cgi-bin\upgrade file. No specific remediation or explo...
CVE-2026-78797: Undefined Security Weakness
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the taskid in tasks-lib.lua...
PT-2026-108982
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
Cisco Application Policy Infrastructure Controller API Command Injection (cisco-sa-apic-cmdinj-L6VR4E7)
According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A command injection vulnerability exists in the web-based management API due to insufficient input validation of user-controlled command arguments. An authenticated,...
Linux Distros Unpatched Vulnerability : CVE-2026-41958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip...
Cisco License (Smart Software Manager) On-Prem Multiple Vulnerabilities (cisco-sa-ssm-access-nttb2dhE)
According to its self-reported version, Cisco License On-Prem formerly Cisco Smart Software Manager On-Prem is affected by multiple vulnerabilities, including: - A vulnerability in the web-based management interface of Cisco License On-Prem could allow an unauthenticated, remote attacker to gain...
ROS-20261009-73-0106
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-94444
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to...
Redis 5.0.7 Lua Sandbox Escape
Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...
HPESBST05161 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3961, Multiple Vulnerabilities
Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Escalation of Privilege; Remote: Arbitrary Code Execution, Arbitrary File Deletion, Denial of Service DoS, Escalation of Privilege, URL Redirection, Unauthorized Access to Application...
ROS-20261009-73-0457
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261009-73-0530
The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...