19116 matches found
Important: 7zip
Issue Overview: A heap buffer overflow vulnerability GHSL-2026-140 exists in 7-Zip version 26.00, caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to exploit this issue for arbitrary code execution or application crashes...
SquashFS ReadBlock Function Disclosure DoS
The vulnerability of the ReadBlock function, a handler for the SquashFS file compressor used by 7-Zip, relates to reading data outside of the permitted range in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...
7-Zip Parse Disclosure
The vulnerability of the Parse function in the UDF format file processing tool of the 7-Zip archive manager is related to reading data beyond the allowed range of memory. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
ParseLibSymbols Function Disclosure
The vulnerability of the ParseLibSymbols function in the 7-Zip archive viewer is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
7-Zip UEFI Dependency Parser Heap Buffer Overflow DoS
The vulnerability of the ParseDependencyExpression function in the 7-Zip UEFI dependency parser involves reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause system failures...
OpenCapsule Function UEFI 7-Zip
The vulnerability of the OpenCapsule function in UEFI capsule file parsers and 7-Zip archivers is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
TencentOS Server 4: storm (TSSA-2026:0414)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0414 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Oracle Linux 7 : ImageMagick (ELSA-2026-17618)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-17618 advisory. - Fix CVE-2026-32636 Orabug: 39375225 - Fix CVE-2026-28691 and CVE-2026-28693 Orabug: 39174244 - Fixes Local File Disclosure via Path Traversal CVE-2026-25965...
Amazon Linux 2023 : 7zip, 7zip-reduced, 7zip-standalone (ALAS2023-2026-1820)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1820 advisory. A heap buffer overflow vulnerability GHSL-2026-140 exists in 7-Zip version 26.00, caused by an under- allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers ...
MINI-365C-2PM7-6JJJ
Bulletin has no description...
MINI-GW72-97XX-8PV5
Bulletin has no description...
MINI-PPWM-GP46-RXV7
Bulletin has no description...
MINI-7GVM-VF24-32RG
Bulletin has no description...
MINI-GP4V-27VP-M8R8
Bulletin has no description...
CVE-2026-8991
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dragndroptext' and 'dragndropbrowsetext' Settings in all versions up to, and including, 1.3.9.7 due to insufficient input sanitization and output escaping. This makes i...
CVE-2026-11453
A vulnerability was found in Tiobon Employee Self-Service System up to 7.2. Affected by this vulnerability is an unknown functionality of the file /Blog/BlogSearch.aspx of the component Login Endpoint. The manipulation of the argument Keyword results in sql injection. The attack can be launched...
CVE-2026-11453 Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection
A vulnerability was found in Tiobon Employee Self-Service System up to 7.2. Affected by this vulnerability is an unknown functionality of the file /Blog/BlogSearch.aspx of the component Login Endpoint. The manipulation of the argument Keyword results in sql injection. The attack can be launched...
EUVD-2026-34981
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument devname results in command injection. It is possible to initiate the attack...
CVE-2026-11450
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument devname results in command injection. It is possible to initiate the attack...
CVE-2026-11450
GL.iNet GL-MT3000 firmware 4.4.5 contains a command injection in the Path Normalization Handler via dlopen in /usr/lib/oui-httpd/rpc/ when processing the dev_name argument. This can be triggered remotely over the network. Upgrading to version 4.7 mitigates the issue by enabling method-level valid...