586819 matches found
CVE-2026-94383: Unrestricted Upload of File with Dangerous Type
The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...
The vulnerability of the django.core.validators.DomainNameValidator module in the Django web application framework allows a attacker to execute arbitrary code.
The vulnerability of the django.corevalidators.DomainNameValidator module in the Django web application framework is related to improper handling of line separators. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Hyper-V component for Windows operating systems, allowing a perpetrator to execute arbitrary code
The vulnerability of the Hyper-V component in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerabilities of the functions Uint8Array.prototype(), TypedArray.prototype(), and ArrayBuffer.prototype() in the NPM package manager vm2 package allow a hacker to execute arbitrary code.
The vulnerability of the functions Uint8Array.prototype, TypedArray.prototype, and ArrayBuffer.prototype in the NPM package manager’s library is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Vulnerability of the avc444_ensure_buffer() function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP, allowing a intruder to execute arbitrary code
The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows Imaging Component (WIC) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Imaging Component WIC in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the require.external component of the vm2 package manager NPM allows a attacker to execute arbitrary code.
The vulnerability of the require.external component in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the crypto.setEngine() function in the vm2 package manager NPM allows a hacker to execute arbitrary code.
The vulnerability of the crypto.setEngine function in the vm2 package manager’s NPM library is related to improper management of processes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the CWMP/TR-069 protocol implementation in TP-Link Archer VX1800v V1 software allows a hacker to execute arbitrary code with root privileges, resulting in complete system compromise.
The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2026-3840)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...
RHEL 9 : gstreamer1-plugins-base (RHSA-2026:69100)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69100 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages conta...
CVE-2026-81469: Unquoted Search Path or Element
Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...
ALSA-2026:69098 Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page CVE-2026-19154 chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium CVE-2026-19173...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2026:4018-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4018-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
RHEL 6 : vim (RHSA-2026:69128)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69128 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via OS command...
SUSE SLES15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4013-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4013-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
Important: postgresql security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...
