656653 matches found
EUVD-2026-117470
Improper Control of Generation of Code 'Code Injection' in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget XML in a multipart upload and overriding the mainDecoratorLocation used by a...
CVE-2026-85627 Apache OFBiz: Authenticated Code Execution Vulnerability
Improper Neutralization of Special Elements Used in a Template Engine 'Server-Side Template Injection' in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a stock non-administrative account to execute arbitrary operating system commands as th...
CVE-2026-85627
Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to a Server-Side Template Injection (SSTI) vulnerability. A remote authenticated attacker with a non-administrative account can execute arbitrary operating system commands as the OFBiz process user. The root cause involves the updateLayou...
Exploit for CVE-2026-109518
cve-2026-109518-apt-patch-proxmox-and-generic Silly little pat...
Security Bulletin: IBM QRadar SIEM contains PHP components with known vulnerabilities
Summary IBM QRadar SIEM contains versions of PHP vulnerable to PHP2Shell vulnerabilities. This bulletin contains mitigations for QRadar SIEM systems. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handli...
Security update for rsyslog
This update for rsyslog fixes the following issues: CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. RainerScript replace length wrap bsc1285036...
SUSE-SU-2026:5122-1 Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...
chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE
A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability could allow a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when ...
chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free
A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...
chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...
chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE
A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...
Critical: Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
Important: Red Hat Security Advisory: postgresql16-pgvector security update
An update for postgresql16-pgvector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
Critical: Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...
chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE
A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...
chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free
A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...