98259 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-91948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is...
PT-2026-92349
Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An out-of-bounds write can occur due to improper input validation. This flaw allows for remote code execution without requiring additional execution privileges or user...
PT-2026-92345
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...
PT-2026-92067
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds write issue exists in server-side static virtual channel handling when CHANNEL OPTION SHOW PROTOCOL is enabled. Authenticated clients can queue oversized channel messages, leading t...
EUVD-2026-78627
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
CVE-2026-25825
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
PT-2026-93186
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd write allowing forged firmware authenticity checks. Attackers can exploit put file.cgi and check image uuid.c to bypass firmware signature validation and load unauthorized firmware images...
PT-2026-92166
Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit user properties permissions on the REST API user write endpoints PUT /ccm/api/1.0/users/uID and POST /ccm/api/1.0/users/uID/change password. A user with an update-scoped OAuth token and permission to edit only one non-sensitive field coul...
CVE-2026-91934: Improper Limitation of a Pathname to a Restricted Directory
Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...
CVE-2026-91940: Improper Limitation of a Pathname to a Restricted Directory
crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the filteruntrustedfields function fails to validate untrusted configuration fields. Attackers can submit crafted config bodies with malicious imagesavedir paths to write attacker-controlled...
CVE-2026-54337: Improper Neutralization of Argument Delimiters in a Command
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...
PT-2026-92059
crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the filter untrusted fields function fails to validate untrusted configuration fields. Attackers can submit crafted config bodies with malicious image save dir paths to write attacker-controll...
PT-2026-92054
Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...
Linux Distros Unpatched Vulnerability : CVE-2026-91951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urbsendcurrentframenumberresult function. A malicious...
FreeBSD : git-lfs -- Improper Link Resolution Before File Access (107f9dad-b05c-11f1-9369-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 107f9dad-b05c-11f1-9369-b42e991fc52e advisory. https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6pvw-g552-53c5 reports: Git LFS is a Git...
Linux Distros Unpatched Vulnerability : CVE-2026-91958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors...
PT-2026-92364
In google mba recv msg of google mba poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-92179: Out-of-bounds Write
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...
PT-2026-92338
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...
PT-2026-92281
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the Vp9DecodeFrameTag function within vp9hwd headers.cc allows for a possible out-of-bounds write. This condition could enable remote...