161379 matches found
PT-2026-108906
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
ROS-20261009-73-0115
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPESBST05161 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3961, Multiple Vulnerabilities
Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Escalation of Privilege; Remote: Arbitrary Code Execution, Arbitrary File Deletion, Denial of Service DoS, Escalation of Privilege, URL Redirection, Unauthorized Access to Application...
PT-2026-108723
A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders src/serializers/decoders//decode graph entities.c in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication commands for example, against an instance with no...
HPESBST05160 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3962, Multiple Vulnerabilities
Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Escalation of Privilege, Buffer Overflow; Remote: Access Restriction Bypass, Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS, Unauthorized Access, Unauthorized Data Injection, Buff...
The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Redis 5.0.7 Lua Sandbox Escape
Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
DEBIAN-CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2025-12999
A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...
CVE-2026-68006
A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...
CVE-2026-107651
A heap-based buffer overflow exists in Eye of GNOME (eog) within the PNG metadata reader . The vulnerability is caused by improper state handling during the parsing of split metadata chunks. A remote attacker could exploit this by tricking a user into opening a specially crafted PNG file , which ...
CVE-2026-107651 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-105404
A flaw was found in ImageMagick. This vulnerability allows a remote attacker to achieve arbitrary code execution or unauthorized data access by supplying crafted input values to the PostScript a page description language coders. Because the application fails to properly sanitize and escape values...
CVE-2026-84875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-84058
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...