543165 matches found
SUSE SLES15 Security Update : php-composer2 (SUSE-SU-2026:4059-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4059-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL...
The vulnerability of the Promise.prototype.finally() function in the vm2 package manager of NPM allows a attacker to execute arbitrary code.
The vulnerability of the Promise.prototype.finally function in the vm2 package manager of NPM is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NPM packet manager’s vm2 library, related to a flaw in the data protection mechanism, allows attackers to execute arbitrary code.
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the command-line interface of the vm2 package manager NPM allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface of the NPM package manager’s vm2 library is related to initialization errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Netlogon service in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Netlogon service in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Graphics component of Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Graphics component in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created RTF format file...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the setNoticeCfg function in the TOTOLink A3600R router’s microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the setNoticeCfg function in the TOTOLink A3600R router’s microprogramming software relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Vulnerability of the rpc_recvBind_ack_pdu() function in the libfreerdp/core/gateway/rpcBind.c file of the RDP client FreeRDP, allowing a attacker to execute arbitrary code
The vulnerability of the rpcrecvBindackpdu function in the libfreerdp/core/gateway/rpcBind.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
RHEL 8 : libtiff (RHSA-2026:69095)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69095 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrar...
SUSE SLES15 Security Update : dracut (SUSE-SU-2026:3997-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3997-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2026:4017-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4017-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
ALSA-2026:69095 Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 For more details about the security issues, including the impact, a CVSS score,...
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
