EUVD-2025-210503

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код внутри песочницы

Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы через созданную HTML-страницу...

The vulnerability of the Microsoft .NET Framework software lies in its lack of data protection mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

CVE-2025-44090

CVE-2025-44090 affects OhSoft CoffeeZip v4.8.0.0. A crafted archive file, downloaded and executed by a user, allows arbitrary code execution. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction is required. Impacts on confidentiality, int...

RHEL 9 : libreoffice (RHSA-2026:43423)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43423 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

Plone 2.5.x < 2.5.5 / 3.0.x < 3.0.3 RCE (HF 20071106)

The version of Plone installed on the remote host is 2.5.x prior to 2.5.5 or 3.0.x prior to 3.0.3. It is, therefore, affected by a remote code execution vulnerability in the statusmessages and linkintegrity modules. A unauthenticated, remote attacker can exploit this to bypass authentication and...

RHEL 8 : libreoffice (RHSA-2026:43460)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43460 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

PT-2026-63349

n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legac...

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.6.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Tenable Security Center is affected by a SQL injection vulnerability...

PT-2026-63374

A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.7.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Redis is an in-memory data structure store. In redis-server from 7.2.0 unt...

ALSA-2026:43218 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 For more details about the security issues, including the impact, a CVS...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the unci tile decoding process. An attacker can achieve arbitrary code execution by supplying a specially crafted HEIF file that triggers a heap out-of-bounds write, allowing the overwrite of a C++ vtable pointer...

CVE-2026-16421

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-16420

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-16420

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-63962

A flaw was found in the Linux kernel's USB Type-C Port Manager TCPM driver. A remote attacker, acting as a malicious USB-C port partner, could exploit an out-of-bounds write vulnerability in the svdmconsumemodes function. By sending an unsolicited 'Discover Modes ACK' with excessive data, the...