162468 matches found
UBUNTU-CVE-2026-82531
Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vul...
CVE-2026-93449: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
PT-2026-107535
A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...
PT-2026-107614
Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, contains issues involving insufficient protection against code injection. This flaw is categoriz...
PT-2026-107616
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...
PT-2026-107621
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the Segment Routing over IPv6 SRv6 Operation, Administration, and Maintenance OAM feature, known as NGOAM. This is caused by improper input validation of IP...
PT-2026-107604
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches affected versions not specified Cisco NX-OS Software for Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the MPLS Operation,...
PT-2026-107533
Name of the Vulnerable Software and Affected Versions @backstage/plugin-techdocs-node versions prior to 1.14.8 @backstage/plugin-techdocs-node versions prior to 1.15.6 @backstage/plugin-techdocs-node versions prior to 2.0.1 Description The @backstage/plugin-techdocs-node package improperly...
Linux Distros Unpatched Vulnerability : CVE-2026-106419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a...
ROS-20261007-73-0318
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20261007-73-0361
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261007-73-0322
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Mercusys AC12 UART Code Execution
The vulnerability of the UART interface in the microprogramming software of Mercusys AC12 routers lies in the absence of a mechanism to protect the alternative hardware interface. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
TeamViewer Code Execution
The vulnerability of TeamViewer’s remote control software lies in improper external control of the username or file path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Graphics Component Microsoft Office Code Execution
The vulnerability of the Graphics Component component in the Microsoft Office software suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft Office Buffer Overflow Code Execution
The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-76471: Heap-based Buffer Overflow
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...
PT-2026-107322
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper control of code generation allows a remote authenticated attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.12.2...
CVE-2026-92532: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...