39922 matches found
CVE-2026-95501
mtrano APENCMS (a template engine component) is affected by a code injection vulnerability in the eval function of the file cms/weasel.php . Manipulating the $_CMS['site'] argument allows a remote attacker to inject and execute code. The attack requires high privileges and user interaction , resu...
EUVD-2026-84493
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-95501 mtrano APENCMS Template weasel.php eval code injection
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms is affected by a code injection vulnerability (CWE-77) where malicious input from an attacker can lead to code execution , information disclosure , and data tampering . The vulnerability impacts versions 0.0 to 2.9 across all platforms. To remediate this, user...
EUVD-2026-84404
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
Security Bulletin: IBM App Connect Enterprise is vulnerable to Code Injection due to Node.js module jsonata (CVE-2026-12208)
Summary IBM App Connect Enterprise Discovery Connectors is vulnerable to Code Injection due to Node.js module jsonata. Vulnerability Details CVEID:CVE-2026-12208 DESCRIPTION: A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the...
CVE-2026-75703: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-89275: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-84412: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-89276: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...
CVE-2026-65111: Improper Neutralization of Special Elements used in a Command
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-75699: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-73369: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
Linux Distros Unpatched Vulnerability : CVE-2026-88807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. CVE-2026-8880...
CVE-2026-95501: Improper Control of Generation of Code
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-75721: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
SUSE CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
AZL-103391 CVE-2026-88807 affecting package libXrender 0.9.11-1
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
