CVE-2026-24806

CVE-2026-24806 arises from an improper generation of code in liuyueyi’s quick-media project, specifically the PNGImageEncoder path within the SVG Batik codec fix module. The vulnerability affects quick-media before v1.0 and is described as a Code Injection issue. Supported details from multiple s...

CVE-2026-24806 Buffer Write Security Vulnerability in liuyueyi/quick-media

Improper Control of Generation of Code 'Code Injection' vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/png modules. This vulnerability is associated with program files PNGImageEncoder.Java. This issue affects quick-media...

CVE-2026-24797 An out of bounds write due to a missing bounds check in neka-nat/cupoch

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

CVE-2026-24795

Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules. This vulnerability is associated with program files regcomp.C. This issue affects CloverBootloader: before 5162...

PT-2026-4902

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

Apache Hadoop HDFS Native Client has Out-of-bounds Write Vulnerability

Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...

Dassault Systèmes SOLIDWORKS eDrawings security vulnerabilities

Dassault Systèmes SOLIDWORKS eDrawings is a collaboration tool provided by Dassault Systèmes, a French company, for viewing, sharing, and annotating 2D/3D design files. Dassault Systèmes SOLIDWORKS eDrawings has a security vulnerability that stems from out-of-bounds writing during the reading of...

PT-2026-3793

Name of the Vulnerable Software and Affected Versions NodeBB Plugin Emoji version 3.2.1 Description The NodeBB Plugin Emoji version 3.2.1 has a flaw that allows administrative users to write files to arbitrary system locations. This is possible through the emoji upload API by manipulating the fil...

MiracleLinux 8 : dotnet8.0-8.0.100-2.el8.ML.1 (AXSA:2024-7380:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7380:01 advisory. dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand CVE-2023-36049 dotnet: ASP.NET Security Feature Bypass Vulnerability in...

RockyLinux 8 : gnupg2 (RLSA-2026:0728)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0728 advisory. GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-23535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003227 advisory. A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002419 advisory. The Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGLOGITECHFF, CONFIGLOGIG940FF, or CONFIGLOGIWHEELSFF is enabled, allows physical...

CVE-2026-0961 Out-of-bounds Write in Wireshark

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

CVE-2025-37174

Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor to create or modify arbitrary files and execute arbitrary...

Delta Electronics DVP-12SE11T Out-of-Bounds Write Vulnerability

Delta Electronics DVP-12SE11T is a networked mainframe from Delta Electronics China. The Delta Electronics DVP-12SE11T is vulnerable to an out-of-bounds write vulnerability, no details of the vulnerability are available at this time...

Adobe Substance 3D Painter < 11.1.2 (APSB26-10)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 11.1.2. It is, therefore, affected by a vulnerability as referenced in the APSB26-10 advisory. - Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could...

CVE-2026-21299

Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21299

Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21307

CVE-2026-21307 affects Substance3D Designer up to version 15.0.3 with an out-of-bounds write vulnerability in a user context. The flaw could allow arbitrary code execution, and exploitation requires the victim to open a malicious file (user interaction). These details are supported by multiple co...