252651 matches found
CVE-2026-62052: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Tipsy = 1.6 versions...
CVE-2026-62123: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Invetex = 2.18 versions...
PT-2026-117729
Security vulnerability affects the apache-nifi package. An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
RockyLinux 10 : dovecot (RLSA-2026:79371)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:79371 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...
Linux Distros Unpatched Vulnerability : CVE-2026-92705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts...
spring-break_cve-2017-8046
spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...
CVE-2026-92705
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
UBUNTU-CVE-2026-92705
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by "Automation Scripts" metadata in "ASS" subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafte...
CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705
The cross-platform subtitle editor Aegisub (versions 3.2.0 to 3.4.2) is vulnerable to arbitrary code execution because it automatically loads Automation scripts referenced in ASS project metadata without verifying user trust. An attacker can distribute a crafted ASS file and a malicious script to...
EUVD-2026-95988
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
Security Bulletin: Vulnerability in Apache Log4j affects IBM Cloud Pak for Watson AIOps (CVE-2021-44228)
Summary A vulnerability was identified within the Apache Log4j library that is used by IBM Cloud Pak for Watson AIOps. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system,...
CVE-2026-108259
Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the MemoryFile process. An attacker can execute arbitrary code in the host sentry process by triggering a double-free condition from an in-sandbox overlay filesystem. This is only exploitable if the attacker has...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the MemoryFile process. An attacker can execute arbitrary code in the host sentry process by triggering a double-free condition from an in-sandbox overlay filesystem. This is only exploitable if the attacker has...