254474 matches found
Ivanti Neurons for ITSM deserialization vulnerability
Ivanti Neurons for ITSM is a suite of enterprise-level IT service management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability, which stems from improper handling of deserialized data that is not trusted. Attackers can exploit this...
CVE-2026-87986: Improper Handling of Syntactically Invalid Structure
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...
RHEL 9 : nginx (RHSA-2026:66542)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66542 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...
Linux Distros Unpatched Vulnerability : CVE-2026-71613
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixe...
RockyLinux 8 : vim (RLSA-2026:66348)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66348 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service vi...
AlmaLinux 9 : vim (ALSA-2026:66366)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66366 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via...
Linux Distros Unpatched Vulnerability : CVE-2026-68006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file CVE-2026-68006 Note that...
Ivanti Neurons for ITSM has a missing authorization vulnerability (CNVD-2026-37875)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability. This vulnerability stems from defects in authorization verification, resulting in incorrect user permission validation...
Adobe Commerce/Magento Open Source Arbitrary Code Execution (APSB26-146)
The version of Adobe Commerce/Magento Open Source installed on the remote host is affected by a vulnerability as referenced in the APSB26-146 advisory. - Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in...
RockyLinux 9 : nginx (RLSA-2026:66542)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...
Debian dsa-6493 : libevent-2.1-7t64 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6493 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6493-1 [email protected] https://www.debian.org/securit...
PT-2026-89889
Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4-1.1 Description An arbitrary code execution issue exists where an attacker can bypass command permission checks. This is achieved by using environment variable assignments before allowlisted commands, as...
PT-2026-89887
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval...
ROS-20260911-73-0100
The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vim Code Execution
The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
C omni-completion module Code Execution
The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
python3complete.vim Code Execution
The vulnerability in the Python code auto-completion mechanism of the python3complete.vim plugin for Vim text editors is related to improper handling of code generation. Exploitation of this vulnerability may allow an attacker to execute arbitrary code...
Vim Python omnicomplete code execution
The vulnerability in Python’s omni-completion mechanism for the runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim text editors in Vim stems from the inclusion of functionality from an untrusted control area. Exploitation of this vulnerability may allow a remote attacker...
CVE-2026-87987: External Control of System or Configuration Setting
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...