90914 matches found
CVE-2026-102133 Kiteworks Core Arbitrary File Write through Command Injection
An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned...
CVE-2026-102133
An optional, separately licensed repository-connector feature in Kiteworks Core is vulnerable to command injection because it fails to neutralize special characters in user-supplied paths before passing them to an external command. An authenticated system administrator can inject commands to writ...
CVE-2026-102133 Kiteworks Core Arbitrary File Write through Command Injection
An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned...
CVE-2026-102143
The Kiteworks Email Protection Gateway contains a vulnerability where an unauthenticated attacker can write a file with attacker-controlled content to the appliance filesystem. The root cause is an administrative upload handler that fails to properly authenticate requests. While this allows for u...
CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...
CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...
CVE-2026-102146
The Kiteworks Email Protection Gateway is vulnerable to an Arbitrary File Write vulnerability caused by Server-Side Template Injection . An authenticated administrator with limited, delegated permissions can exploit this to write files with attacker-controlled content to arbitrary locations acces...
CVE-2026-102146 Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could ...
CVE-2026-102146 Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could ...
CVE-2026-102099
Kiteworks Core versions before 9.5.0 are vulnerable to an Arbitrary File Write vulnerability. The root cause is an improper restriction of a user-supplied file path within an administrative export feature. An authenticated administrator with access to this function could write files to arbitrary ...
CVE-2026-102099 Kiteworks Core arbitrary file write
Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied file path in a Kiteworks administrative export feature could allow an authenticated administrator to write a file to an arbitrary location on the underlying host, potentially...
CVE-2026-102099 Kiteworks Core arbitrary file write
Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied file path in a Kiteworks administrative export feature could allow an authenticated administrator to write a file to an arbitrary location on the underlying host, potentially...
CVE-2026-102089
The Kiteworks Email Protection Gateway (versions before 9.5.0) is vulnerable to a path traversal weakness within an administrative import function. This flaw allows an authenticated administrator to write files to arbitrary locations on the server, which could potentially be leveraged to achieve ...
FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data
A flaw was found in FFmpeg. This vulnerability, stemming from an integer overflow and a subsequent out-of-bounds write during the processing of Common Encryption CENC subsample data, could allow a local attacker to potentially trigger information disclosure, data corruption, or a denial of servic...
ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter
A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the vfhqdn3d filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent...
ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...
ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder
A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...
FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream
A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...
CVE-2026-47501
A flaw was found in the NVIDIA GPU Display Driver. A local user can exploit an out-of-bounds write vulnerability in the kernel mode layer by supplying mismatched memory buffers during event buffer setup. Successful exploitation could lead to privilege escalation, arbitrary code execution, denial ...