161726 matches found
CVE-2026-87114
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...
EUVD-2026-88361
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...
CVE-2026-87114 Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...
CVE-2026-85644
A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...
CVE-2026-97504
A flaw was found in the Linux kernel's Lenovo SE10 watchdog driver. Improper error handling during device initialization fails to clear a platform device pointer if registration fails, resulting in a use-after-free condition. A local user could exploit this vulnerability to cause a Denial of...
CVE-2026-93826
A flaw was found in the Linux kernel's Logitech HID++ driver. When input device registration fails during a device connection event, the driver releases the device memory but retains a stale pointer to it. An attacker could exploit this flaw to cause a use-after-free vulnerability, where the kern...
PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...
CVE-2026-93348
A flaw was found in Unsloth Zoo, which can lead to arbitrary code execution when loading a machine learning model. The vulnerability exists due to improper input sanitization of the model type parameter within configuration files during compilation. An attacker can exploit this issue by supplying...
CVE-2026-96538
WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...
CVE-2026-96538
WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...
USN-8839-1: Atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. CVE-2026-46529 It was discovered that Atril incorrectly handled certain PDF file...
USN-8839-1 atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. CVE-2026-46529 It was discovered that Atril incorrectly handled certain PDF file...
USN-8838-1: catdoc vulnerabilities
It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...
USN-8838-1 catdoc vulnerabilities
It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...
USN-8837-1 pdfminer vulnerabilities
It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...
USN-8837-1: pdfminer vulnerabilities
It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. CVE-2025-64512, CVE-2025-70559...
EUVD-2026-88314
WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...
CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation
WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...
USN-8829-1 plasma-workspace vulnerability
Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...
USN-8829-1: Plasma Workspace vulnerability
Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...