254654 matches found
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
ROS-20260921-73-0016
The vulnerability of the printing subsystem in Samba networking-enabled programs is related to the lack of measures taken to neutralize special elements during the processing of the %J parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE SLED15 / SLES15 Security Update : emacs (SUSE-SU-2026:4083-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4083-1 advisory. - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflo...
SUSE SLES15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4013-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4013-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
RHEL 8 : gstreamer1-plugins-base (RHSA-2026:69531)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69531 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...
Important: postgresql security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...
PT-2026-96096
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description The blocklist workflow module fails to validate the file extension of a user-supplied filename parameter. While the basename function is used to remove path components and checks are performed for empt...
ALSA-2026:69095 Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 For more details about the security issues, including the impact, a CVSS score,...
ROS-20260921-73-0086
The vulnerability involves loading unreliable external data alongside reliable data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
PT-2026-96642
Name of the Vulnerable Software and Affected Versions Ghostscript affected versions not specified Description Ghostscript incorrectly handles JPEG 2000 image components that have mismatched subsampling factors. An attacker could cause the application to crash or execute arbitrary code by inducing...
CVE-2026-88405
The Univer v1.0.0-alpha.2 software is vulnerable to a remote code execution (RCE) flaw within the RemoteRegisterFunctionService function, specifically located at /remote/remote-register-function.service.ts. An attacker can exploit this vulnerability by sending a crafted payload to execute arbitra...
TencentOS Server 3: gstreamer1-plugins-bad-free (TSSA-2026:1028)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1028 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 For more details about the security issues, including the impact, a CVSS score,...
SUSE SLED15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4016-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4016-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. -...
SUSE SLES15 Security Update : postgresql18 (SUSE-SU-2026:4015-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4015-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2026:4017-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4017-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
Failover Cluster Code Execution
The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
CVE-2026-88404
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...