CVE-2026-88420

A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...

The vulnerability of the libssh library, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the libssh library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor, related to the inclusion of functions from an unreliable and uncontrolled area, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

EUVD-2026-87082

A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libxml2 vulnerabilities (USN-8787-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8787-1 advisory. It was discovered that libxml2 incorrectly handled certain XML elements under...

openSUSE 16: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (openSUSE-SU-2026:21883-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21883-1 advisory. - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via...

Debian dsa-6515 : libvlc-bin - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6515 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6515-1 [email protected] https://www.debian.org/securit...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Base Plugins vulnerability (USN-8797-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8797-1 advisory. It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote...

The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Debian dsa-6516 : ghostscript - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6516 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6516-1 [email protected] https://www.debian.org/security/...

PT-2026-98854

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Insecure deserialization occurs in the Quartz JDBC job store. An authenticated attacker can exploit this flaw to execute arbitrary code on the affected system. Deserialization is the proces...

EUVD-2026-87083

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)

The version of Adobe Experience Manager Forms JEE installed on the remote host is 6.5.25 or earlier, or 6.5 LTS SP2 or earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-151 advisory. - Adobe Experience Manager Forms JEE is affected by an Incorrect...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 lies in their ability to exploit memory after decompression, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the video filter vf_swaprect in the FFmpeg multimedia library allows a hacker to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the vfswaprect video filter in the FFmpeg multimedia library is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow attackers to corrupt memory, cause service failures, or execute arbitrary code...

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library allows a intruder to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

The vulnerability of the Erlang/OTP software platform, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Erlang/OTP software platform is related to overflowing buffers in the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library allows a hacker to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library lies in the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

The vulnerability of the Outdated._load_cache() function in the glances/outdated.py file of the Glances monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Outdated.loadcache function in the glances/outdated.py monitoring tool is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...