458241 matches found
CVE-2026-65164: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to...
CVE-2026-103845: Uncontrolled Search Path Element
Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-75826: Improper Neutralization of Special Elements used in an OS Command
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices, RUTOS 7.22 before 7.25.2 TAP devices, and TSWOS 1.9 before 1.10.4 TSW and SWM devices allows a remote authenticated...
ROS-20261013-73-0098
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ALSA-2026:82015 Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...
CVE-2026-110228: Improper Neutralization of Input During Web Page Generation
wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the...
PT-2026-113494
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue in the Desktop component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...
PT-2026-111815
šØ CVE-2026-104344 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. š@cveNotify...
PT-2026-111813
šØ CVE-2026-104342 Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. š@cveNotify...
PT-2026-113363
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2023 and 2025 Description An improper control of code generation leads to a code injection issue that allows unauthenticated remote attackers to execute arbitrary code on the server. This process occurs in the context...
CVE-2026-95121
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...
PT-2026-113379
šØ CVE-2026-71385 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted...
PT-2026-113424
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An incorrect authorization issue allows a low-privileged attacker to execute arbitrary code in the context of the current user. This process does not require any user interaction...
PT-2026-113427
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw can be exploited...
PT-2026-111799
Name of the Vulnerable Software and Affected Versions jfrog-cli versions prior to 2.126.1 Description Improper sanitization of user-controlled arguments passed to underlying command execution allows for argument injection. Under specific configurations, this can lead to arbitrary code execution o...
PT-2026-111818
Name of the Vulnerable Software and Affected Versions Shopware version 6.7 Description Shopware allows the upload of attacker-controlled HTML files which are served as text/html without effective security headers, such as Content-Security-Policy or X-Content-Type-Options: nosniff. This leads to...
PT-2026-111390
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Due to the front end integration with Node.js,...
PT-2026-111580
Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a Buffer Access with Incorrect Length Value in the BIOS. This issue can lead to buffer overflows, memory corruption, and arbitrary code execution,...
PT-2026-113354
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 2025 Update 13 Adobe ColdFusion 2023 Update 25 Description Adobe ColdFusion is affected by an unrestricted upload of dangerous file types. This issue allows an unauthenticated attacker to upload files that could result in...
CVE-2026-104341: Out-of-bounds Write
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...