491849 matches found
CVE-2026-119198 Nuxt dev server arbitrary file read through client error reports
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an exposed Nuxt development server can send a nuxt:dev:client-error event over the HMR socket with an absolute file path at the end of its message. The development server reads that fi...
CVE-2026-119198
The Nuxt web development framework (versions 4.6.0 through 4.6.3 ) is vulnerable to an arbitrary file read via the development server. An attacker with TCP access to an exposed development server can send a nuxt:dev:client-error event over the HMR socket containing an absolute file path. The serv...
Important: Red Hat Security Advisory: aspell security update
An update for aspell is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
aspell: aspell: Arbitrary code execution via crafted dictionary file
A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue occurs due to an integer calculation error during buffer capacity checks in the read-only dictionary...
[SECURITY] [DLA 4869-1] vlc security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4869-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 29, 2026 https://wiki.debian.org/LTS -...
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
DEBIAN-CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-119250
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
UBUNTU-CVE-2026-9536
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-119250
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...
CVE-2026-119250
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...
CVE-2026-119250
A vulnerability in WiFiman Desktop for macOS allows a malicious actor with local access and low privileges to exploit an External Control of File Name or Path (CWE-73) flaw. Successful exploitation enables the execution of arbitrary commands with root privileges on the host device. No specific ve...
EUVD-2026-113328
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...
CVE-2026-9535
The vtk library (version 9.6.1 ) contains an out-of-bounds read vulnerability within the vtkChacoReader InputGraph2 functionality. The root cause is a design flaw where the reader fails to verify that neighbor vertex IDs extracted from a .graph file fall within the valid range of the allocated po...
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
EUVD-2026-113322
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-9536
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...