Lucene search
+L

209859 matches found

Cvelist
Cvelist
added 2026/08/04 6:42 p.m.39 views

CVE-2026-47781 pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing

PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...

8.4CVSS0.00131EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/04 6:10 p.m.8 views

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

7.3CVSS7.2AI score0.00179EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/04 5:30 p.m.42 views

CVE-2026-70470 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...

9.5CVSS0.00523EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/04 5:16 p.m.7 views

CVE-2026-58074

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

8.6CVSS0.00354EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/04 4:47 p.m.6 views

postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...

8.8CVSS8.5AI score0.00378EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/04 4:47 p.m.9 views

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS8.1AI score0.00378EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/04 4:30 p.m.6 views

xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow

A flaw was found in the glamorfontget function of the xorg-x11-server. This vulnerability, a heap buffer overflow, occurs when the server processes a specially crafted PCF font file where individual glyph metrics exceed the declared maximum bounds. An authenticated X client can exploit this by...

8.5CVSS6.3AI score0.00269EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/04 3:56 p.m.7 views

EUVD-2026-52760

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

8.6CVSS6.1AI score0.00354EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/04 3:56 p.m.10 views

CVE-2026-58074

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

8.6CVSS6.1AI score0.00354EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/04 3:56 p.m.86 views

CVE-2026-58074

CVE-2026-58074 describes a vulnerability that allows a high-privileged attacker to execute arbitrary code on the server. The CVSS 4.0 metrics indicate a network-exposed issue requiring no user interaction and with high impacts to confidentiality, integrity, and availability, while the attacker pr...

8.6CVSS6.1AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/04 3:56 p.m.40 views

CVE-2026-58074

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

8.6CVSS0.00354EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 3:13 p.m.8 views

EUVD-2026-52739

Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to version 3.1.3, several custom-tool components — AgentAsTool, ChatflowTool, and ExecuteFlow — ran code in the in-process vm2 sandbox. To build that code, they inserted a user-controlled...

9CVSS5.8AI score0.00312EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/08/04 2:28 p.m.5 views

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the additionalConfig input to the TypeORM DataSource class, which allows arbitrary options to be set. An attacker can achieve arbitrary code execution on the serv...

9CVSS6.2AI score0.00792EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/08/04 2:28 p.m.8 views

Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via the additionalConfig input to the TypeORM DataSource class, which allows arbitrary options to be set. An attacker can achieve arbitrary code execution on the server by uploading...

9CVSS6.2AI score0.00792EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/04 2:27 p.m.13 views

CVE-2026-69251 Flowise RCE via TypeORM DataSource

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...

9CVSS5.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/04 1:13 p.m.9 views

systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication IPC API call with spurious data. In older versions v249 and earlier, this can lead to stack overwriting with attacker-controlled content,...

5.5CVSS6.2AI score0.00121EPSS
SaveExploits0References15
EUVD
EUVD
added 2026/08/04 12:59 p.m.12 views

EUVD-2026-52670

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.5AI score0.00145EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/04 12:59 p.m.7 views

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.5AI score0.00145EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/08/04 12:59 p.m.40 views

CVE-2026-10709 FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS0.00145EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/04 12:4 p.m.12 views

Moderate: Red Hat Security Advisory: systemd security update

An update for systemd is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring Syst...

5.5CVSS7.1AI score0.00121EPSS
SaveExploits0References2
Rows per page
Query Builder