210917 matches found
SUSE-SU-2026:22895-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...
CVE-2026-3821
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3821
CVE-2026-3821 affects Supermicro SMASH services X14DBG-DAP and X14DBI. The issue is an arbitrary code execution vulnerability exploitable via SMASH’s input capability, with a network attack vector and low privileges required. Impact as described includes data integrity compromise and potential Do...
CVE-2026-3821
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
EUVD-2026-47615
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
CVE-2026-3821 Supermicro SMASH service contain an Arbitrary code execution issue
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...
CVE-2026-64033
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rtrs module. An incorrect cleanup sequence during path file creation can lead to a use-after-free vulnerability. This issue occurs when an object is deallocated prematurely, and subsequent...
CVE-2026-64027
A flaw was found in the net/shaper component of the Linux kernel. A race condition exists in how VALID marks are handled for entries in an XArray. This can lead to a Use-After-Free UAF vulnerability, where memory is incorrectly freed while still in use, potentially allowing an attacker to cause a...
CVE-2026-64025
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter sockmap component when used with kernel TLS kTLS receive. A race condition exists where skpsockverdictdataready can improperly interact with the kTLS receive process. This can lead to a use-after-free vulnerability, potentially...
CVE-2026-64011
A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP component. The llcpsockrelease function, which handles the release of LLCP sockets, can incorrectly unlink a socket while it is still in a connecting state. This can result in a use-after-free...
SUSE CVE-2026-16411
Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2025-50330
An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe...
EUVD-2025-210499
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
PT-2026-63488
Name of the Vulnerable Software and Affected Versions OhSoft CoffeeZip version 4.8.0.0 Description An issue allows attackers to execute arbitrary code when a user downloads and executes a specially crafted archive file. Recommendations At the moment, there is no information about a newer version...
RHEL 8 : libreoffice (RHSA-2026:43461)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43461 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...
Vulnerability of components /api/v1/validate/code and /api/v1/auto_login in the software for visual development of IBM Langflow OSS AI agents, allowing a perpetrator to execute arbitrary code.
The vulnerability of the software components /api/v1/validate/code and /api/v1/autologin of the IBM Langflow OSS visual development agent for AI agents is related to improper code generation management. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...
MiracleLinux 8 : nginx:1.24 (AXSA:2026-1325:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1325:01 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...
Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Overview Duplicati v2.3.0.1 is vulnerable to arbitrary code execution when installed outside the default C:\Program Files\Duplicati 2\ directory. An attacker with local user privileges who can write files to the Duplicati installation directory can execute arbitrary code by placing malicious file...