postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

Zyxel CGI Code Execution

The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted HTTP requests...

VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

NLTK Library Code Execution

The vulnerabilities of the nltk.parse.dependencygraph.dot2img and nltk.translate.api.AlignedSent.reprsvg functions in the NLTK library for symbolic and statistical processing of natural language are related to the use of an insecure search path. Exploiting these vulnerabilities could allow...

PT-2026-97068

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An issue exists where a remote authenticated attacker can execute arbitrary code. This occurs due to improper neutralization of special elements used in an OS command, a flaw that...

PT-2026-96774

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When...

PT-2026-97010

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer. This issue could allow arbitrary code execution in the context of the curren...

PT-2026-96981

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue could result in arbitrary code...

PT-2026-96907

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

PT-2026-96897

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

CVE-2026-83962: Stack-based Buffer Overflow

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-97046

Name of the Vulnerable Software and Affected Versions openEQUELLA versions prior to 2026.1.0 Description An authenticated non-guest user can execute arbitrary code via Java deserialization at the '/invoker/' HTTP invoker endpoint. The issue occurs because the class-name denylist enforced by...

CVE-2026-17637: Deserialization of Untrusted Data

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data...

CVE-2026-17636: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity...

CVE-2026-83963: Out-of-bounds Write

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81998: Out-of-bounds Write

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81995: Improper Input Validation

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue do...

CVE-2026-75745: Incorrect Authorization

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...