505833 matches found
PT-2026-65691
The Streamit WordPress theme through 4.5.0 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions f...
PT-2026-65965
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
PT-2026-65957
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
PT-2026-65963
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
PT-2026-65883
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...
PT-2026-65936
Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description An out-of-bounds write exists in the tchdr bytestream read function. This issue occurs because the software fails to properly validate user-supplied data, allowing a write operation...
RockyLinux 9 : php (RLSA-2026:33449)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:33449 advisory. php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability CVE-2026-6722 PHP: PHP: Denial of Service via imprope...
NewStart CGSL MAIN 6.06 : cups-filters Multiple Vulnerabilities (NS-SA-2026-0051)
The remote NewStart CGSL host, running version MAIN 6.06, has cups-filters packages installed that are affected by multiple vulnerabilities: - CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to,...
RockyLinux 10 : pipewire (RLSA-2026:47083)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47083 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description bloc...
PT-2026-65951
Aeon load time series segmentation benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a...
PT-2026-65946
Sony XAV-9500ES AVRCP Br Response Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicio...
PT-2026-65945
Sony XAV-9500ES l2 reassemble sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
The vulnerability of the ExprListDelete() function in the expr.c file of the SQLite database management system allows a attacker to cause service failure, memory corruption, or execute arbitrary code.
The vulnerability of the sqlite3ExprDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to deny service, cause a memory leak, or execute arbitrary code...
PT-2026-65863
Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...
PT-2026-65833
Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description A directory traversal issue exists in the Syslog server. A remote actor with network access may exploit this flaw to execute arbitrary code. Directory traversal is a vulnerability that...
PT-2026-65944
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
CVE-2026-51992
SQL Injection vulnerability in ClickHouse Server Versions = 26.3.9.8 allows a remote attacker to execute arbitrary code via the create dictionaries function...
PT-2026-65938
Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description A heap-based buffer overflow exists in the vCardParser class. The issue occurs because the software fails to properly validate a user-supplied string before copying it to a heap-bas...
PT-2026-65950
Aeon load human activity segmentation datasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a...