543274 matches found
The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NPM packet manager’s vm2 library, related to a flaw in the data protection mechanism, allows attackers to execute arbitrary code.
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the command-line interface of the vm2 package manager NPM allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface of the NPM package manager’s vm2 library is related to initialization errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EulerOS Virtualization 2.10.1 : sqlite (EulerOS-SA-2026-3856)
According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to caus...
SUSE SLES15 Security Update : php-composer2 (SUSE-SU-2026:4059-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4059-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL...
RHEL 8 : redis:6 (RHSA-2026:69542)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69542 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
ALSA-2026:69095 Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 For more details about the security issues, including the impact, a CVSS score,...
CVE-2026-88405
The Univer v1.0.0-alpha.2 software is vulnerable to a remote code execution (RCE) flaw within the RemoteRegisterFunctionService function, specifically located at /remote/remote-register-function.service.ts. An attacker can exploit this vulnerability by sending a crafted payload to execute arbitra...
CVE-2026-78847
All versions of gray-matter (verified on version 4.0.3 ) are vulnerable to arbitrary code execution. The flaw exists in the JavaScript engine located in lib/engines.js , where the application uses eval() to parse front matter when the language is set to js/javascript . While the documents do not ...
RHEL 8 : libtiff (RHSA-2026:69095)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69095 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrar...
EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2026-3854)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configure...
Linux Distros Unpatched Vulnerability : CVE-2026-52727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from...
RHEL 8 : redis:6 (RHSA-2026:69533)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69533 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
RHEL 9 : webkit2gtk3 (RHSA-2026:69098)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69098 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Skia in Google...
AlmaLinux 8 : libtiff (ALSA-2026:69095)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69095 advisory. libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 Tenable has extracted the preceding description block directly from the...
CVE-2026-94184: Stack-based Buffer Overflow
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...
