250314 matches found
PT-2026-105521
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-27g9-p43v-cw3v. This link is maintained to preserve external references. Original Description vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.final...
PT-2026-94134
Name of the Vulnerable Software and Affected Versions Affinity by Canva versions prior to 3.3.0 Description Insufficient bounds checking during the parsing of Affinity document files leads to a stack-based buffer overflow. This occurs when the application processes a specially crafted document,...
PT-2026-105516
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jxxv-8r27-vm4p. This link is maintained to preserve external references. Original Description vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary...
PT-2026-99045
Name of the Vulnerable Software and Affected Versions NetworkManager-fortisslvpn affected versions not specified Description The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters within VPN connection profile credentials. A local unprivileged user can exploit th...
Check Point Security Gateway Firewall Code Execution
The vulnerability of Check Point Security Gateway and Check Point Spark Firewall is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
RHEL 7 : vim (RHSA-2026:68711)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68711 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: arbitrary command execution via modeline sandbox...
AlmaLinux 10 : postgresql18 (ALSA-2026:67280)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67280 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...
EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3824)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...
PT-2026-95076
Name of the Vulnerable Software and Affected Versions NetworkManager-l2tp affected versions not specified Description Improper input validation allows local users with VPN connection creation permissions to inject arbitrary pppd directives. By providing mru or mtu property values that contain...
PT-2026-94191
Name of the Vulnerable Software and Affected Versions flatpak-builder affected versions not specified Description A flaw exists where Git hooks are not disabled when applying patch sources with use-git-am set to true. An attacker providing a malicious source containing a Git post-applypatch hook...
CVE-2026-86320: Improper Control of Generation of Code
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...
CVE-2026-86320: Improper Control of Generation of Code
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...
AlmaLinux 9 : postgresql:16 (ALSA-2026:67491)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67491 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...
AlmaLinux 9 : postgresql:18 (ALSA-2026:67848)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67848 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...
PT-2026-95115
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A use after free issue exists within the Extensions component. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by utilizing a specially crafted Chrome...
CVE-2026-62997 Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedrodatasetsexperimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weightsonly=True, and user-supplied loadargs are silently dropped. On PyTorch versions...
CVE-2026-62997
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedrodatasetsexperimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weightsonly=True, and user-supplied loadargs are silently dropped. On PyTorch versions...
CVE-2026-20324 Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...
Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update
Red Hat Edge Manager Version 1.1.4 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...
RLSA-2026:67848 Important: postgresql:18 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector an...