Zyxel CGI Code Execution

The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted HTTP requests...

VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

NLTK Library Code Execution

The vulnerabilities of the nltk.parse.dependencygraph.dot2img and nltk.translate.api.AlignedSent.reprsvg functions in the NLTK library for symbolic and statistical processing of natural language are related to the use of an insecure search path. Exploiting these vulnerabilities could allow...

PT-2026-104840

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

PT-2026-96774

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When...

PT-2026-97010

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer. This issue could allow arbitrary code execution in the context of the curren...

ALSA-2026:69876 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

ALSA-2026:69914 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

ALSA-2026:69923 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

PT-2026-96981

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue could result in arbitrary code...

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

APSB26-148 : Security Updates Available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses critical and important vulnerabilities that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...

APSB26-155 : Security updates available for Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

APSB26-151 : Security updates available for Adobe Experience Manager (AEM) Forms

Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition JEE. This update addresses critical vulnerabilities that could result in arbitrary code execution, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild f...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fontforge (UTSA-2026-090278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090278 advisory. An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002313 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. Tenable has extracted the preceding description block directly from the Unity Linu...

Linux Distros Unpatched Vulnerability : CVE-2026-95508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a...