1083 matches found
bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)
tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: GHSA-24CC-9352-H2PG...
bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)
tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: MEND:CVE-2026-104266...
Authorization Bypass
Payload CMS is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control and file validation when handling client uploads across multiple collections sharing an S3 bucket, which allows an authenticated attacker to overwrite existing objects belonging to another...
CVE-2026-105867
Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for...
AZL-105959 CVE-2026-105773 affecting package clamav 1.5.4-2
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773 Canimaan Software ClamXAV local privilege escalation
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
EUVD-2026-92797
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773
Canimaan Software ClamXAV versions 3.3 through 3.11 are vulnerable to a local privilege escalation vulnerability within the Privileged Helper Tool . This issue is caused by a race condition combined with insufficient file validation , which could allow a local attacker to execute arbitrary code w...
CVE-2026-105773 Canimaan Software ClamXAV local privilege escalation
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
Canimaan Software ClamXAV local privilege escalation
RISK EVALUATION ClamXAV contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. 2. RECOMMENDED PRACTICES Fixed in 3.11.1. 3...
PT-2026-106238
Name of the Vulnerable Software and Affected Versions Canimaan Software ClamXAV versions 3.3 through 3.11 Description A local privilege escalation issue exists in the Privileged Helper Tool. This is caused by a race condition and insufficient file validation, which allows a local attacker to...
CVE-2026-105773: Concurrent Execution using Shared Resource with Improper Synchronization
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-56590
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...
CVE-2026-56590 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...
CVE-2026-56590
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability caused by improper file validation controls. This flaw allows an unauthenticated attacker to upload and execute malicious payloads, potentially leading to a complete server compromise . No specific affected ver...
CVE-2026-56590 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...
CVE-2026-54559
A flaw was found in PocketSphinx, a small speech recognizer. Inadequate validation of boundary conditions in language model loaders and unbounded string fields in acoustic model loaders can lead to stack or heap buffer overflows and memory corruption. An attacker with write access to a directory...
CVE-2026-84171
The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server...