372109 matches found
EUVD-2026-44517
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
EUVD-2026-44527
CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access o...
EUVD-2026-44562
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2026-44561
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed...
PT-2026-60316
Name of the Vulnerable Software and Affected Versions Wekan versions prior to 9.31 Description A logged-in board member can perform arbitrary file reads and cause a denial of service by inserting an attachment document through the '/attachments/insert' DDP method. The issue occurs because the...
PT-2026-60343
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home affected versions not specified Description A heap-based buffer overflow exists in the handling of custom USB packets. The issue occurs because the device fails to properly validate the length of user-supplied...
Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2026-31987)
Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a boundary violation vulnerability, which stems from improper handling of boundary checks for malicious files. Attackers can exploit this vulnerability to execute arbitrary cod...
Debian dsa-6388 : libxfont-dev - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6388 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/securit...
PT-2026-60341
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home affected versions not specified Description An issue exists in the handling of software updates due to the improper verification of cryptographic signatures. This allows a physically present attacker to execute...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31724)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code under the current user environment...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31726)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code under the current user environment...
CVE-2025-65720
Open Source GPT Researcher v3.3.7 is affected by CVE-2025-65720, described as a remote code execution vulnerability. Attackers can cause arbitrary commands to run on a victim system by interacting with a crafted HTML page. The linked ENISA EUVD entry confirms the issue and references exploitation...
The vulnerability of the control consoles for SonicWall SMA 1000 microprogrammed network interface devices allows attackers to execute arbitrary code.
The vulnerability of the control consoles for SonicWall’s SMA 1000 microprogrammed network interface devices is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2026-30623
CVE-2026-30623 affects LiteLLM 1.18.10 via the MCP server creation feature. The vulnerability arises when MCP configuration JSON can set arbitrary values for command and args, which LiteLLM executes on the host without validation, enabling remote code execution with the LiteLLM process privileges...
Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2026-31988)
Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a cross-domain write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...
Adobe Illustrator Input Validation Vulnerability (CNVD-2026-31723)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a vulnerability in input validation, allowing attackers to execute arbitrary code within the context of the current user...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31725)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code in the current user environment. This requires the user to open a...
Microsoft Word resource management error vulnerability (CNVD-2026-31550)
Microsoft Office Word is a word processing software within the Microsoft Office suite, widely used for document editing and formatting. There is a resource management vulnerability in Microsoft Office Word; this vulnerability stems from objects not being properly handled after being released...
Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-31553)
Microsoft Excel is a spreadsheet processing component within the Microsoft Office suite, primarily used for data calculation, analysis, and visualization. Microsoft Excel has a heap buffer overflow vulnerability, which stems from improper handling of certain data, leading to out-of-bound writes t...