247368 matches found
CVE-2026-100103: Use of Default Credentials
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2026-88392
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-37719: Undefined Security Weakness
An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2019-25777
YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...
CVE-2026-88392: Undefined Security Weakness
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
CVE-2026-100102: Active Debug Code
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...
CVE-2026-12171: Inclusion of Functionality from Untrusted Control Sphere
auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...
CVE-2019-25777: Improper Control of Dynamically-Identified Variables
YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...
PT-2026-104818
Name of the Vulnerable Software and Affected Versions LibreOffice Calc versions prior to 26.2.5 Description LibreOffice Calc allows linking a cell range to an external data source, with the link saved within the document. An attacker can specify a Java database driver to be loaded from a remote...
The vulnerability of the Adobe Substance 3D Modeler software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
AlmaLinux 10 : osbuild-composer (ALSA-2026:66432)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66432 advisory. golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821...
Debian dsa-6544 : sabnzbdplus - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6544 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6544-1 [email protected] https://www.debian.org/security/ Moritz...
Debian dsa-6543 : fonts-opensymbol - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6543 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6543-1 [email protected] https://www.debian.org/securit...
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...