28025 matches found
postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write
A flaw was found in PostgreSQL. An integer overflow in multiple server features allows an unprivileged database user to cause an undersized memory allocation that leads to an out-of-bounds write. This issue allows an attacker to execute arbitrary code as the operating system user running the...
Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud multiple vulnerabilities addressed
Summary This release addresses security vulnerabilities in application and operator images of ELM on Hybrid cloud offering. Identified vulnerabilities identified below relate to the underlying OS packages and language dependencies which impacts the product within the deployed environment. Two of...
CVE-2026-53876
RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.
The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
The vulnerability of the Windows UEFI boot interface of Windows operating systems allows a hacker to bypass existing security mechanisms.
The vulnerability of the Windows UEFI boot interface in operating systems involves a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to bypass existing security measures...
The vulnerability of the Windows Internet operating system component, which allows a hacker to increase their privileges
The vulnerability of the Windows Internet operating system components is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.
The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...
The vulnerability of the BitLocker data protection function in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the BitLocker data protection function in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
PT-2026-50228
RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...
ROS-20260617-73-0029
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Photon OS 5.0: Libssh2 PHSA-2026-5.0-0857
An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0857. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-20220: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to insufficient input validation in the configuration template engine of the...
Stable Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Stable channel is being updated to OS version 16667.47.0 Browser version 149.0.7827.153 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta...
Photon OS 4.0: Nghttp2 PHSA-2026-4.0-1002
An update of the nghttp2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1002. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important Photon OS Security Update - PHSA-2026-5.0-91-0883
Updates of 'libpng', 'erlang' packages of Photon OS have been released...
GHSA-H67P-54HQ-RP68 vulnerabilities
Vulnerabilities for packages: tileserver-gl, jupyter-base-notebook, lerna, airflow, argo-workflows, kubeflow-katib, prism, sqlpad, vitess, code-server, langfuse, pulumi, renovate, thingsboard, py3-jupyterlab, opensearch-dashboards, kubeflow-pipelines, ts-patch, eslint, saf...
CVE-2026-0152
In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
Malicious code in @welcome-onboarding-web/mobile-focus-account-beta-merging (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5587680c29332345c8dd87172c03e0ba20f858c968d16c5a6c34717b8e95bcf5 scripts/postinstall.js is heavily obfuscated obfuscator.io with rotated base64-RC4 string array and a self-defending regex tamper check that...
CVE-2026-10748
An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0...