209182 matches found
EulerOS 2.0 SP12 : jbig2dec (EulerOS-SA-2026-3269)
According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...
MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-1776:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1776:01 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 encoding/asn1: golang: Go encoding/asn1: Denial ...
CVE-2026-28638: Improper Input Validation
In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87396
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88610
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the FileAPI allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...
PT-2026-88653
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in SiteIsolation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...
PT-2026-88673
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...
ROS-20260908-73-0090
The vulnerability in Ruby is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2026-62647: Improper Input Validation
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
Summary A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. Impact An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into...
NewStart CGSL MAIN 7.02 : gnupg2 Vulnerability (NS-SA-2026-0098)
The remote NewStart CGSL host, running version MAIN 7.02, has gnupg2 packages installed that are affected by a vulnerability: - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For...
EulerOS 2.0 SP12 : jbig2dec (EulerOS-SA-2026-3344)
According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...
Adobe Illustrator < 29.8.11 / 30.0 < 30.8 Multiple Arbitrary code execution (APSB26-131)
The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.11, 30.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-131 advisory. - Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.
The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...
The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.
The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...
The vulnerability of the ogs_sbi_timeParse() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.
The vulnerability of the ogssbitimeParse function, a component of the NR/LTE Open5GS network creation and management tool, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
CVE-2026-55273: Improper Input Validation
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ROS-20260908-73-0062
The vulnerability in nvidia-kmod is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
PT-2026-88431
Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description The software fails to sanitize SAML assertion attribute values before they are interpolated into LDAP search filters within the LDAP datastore configuration. Because raw values ar...