1273204 matches found
Rocky Linux 10.2 [CIQ] Security Update: flatpak-builder / flatpak-builder-debuginfo / etc (crlsa-2026_80495)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680495 advisory. flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git- am CVE-2026-86320 Tenable has extracted the preceding...
Security Updates for Microsoft Access Products C2R (October 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-102849, CVE-2026-102850, CVE-2026-105591,...
Security Updates for Microsoft Visio Products C2R (October 2026)
The Microsoft Visio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. CVE-2026-102855, CVE-2026-102856, CVE-2026-102857 Note that...
Security Updates for Microsoft Office Products C2R (October 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...
FreeBSD: VID-fac18f5f-afc2-11f1-8266-3c7c3fba4204 (CVE-2026-71184): Gitea -- multiple vulnerabilities
Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...
CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
FreeBSD: VID-f4af92f7-95ae-11f1-a6f7-b42e991fc52e (CVE-2026-59774): gitea -- Multiple vulnerabilities
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files...
VulnCheck KEV: CVE-2026-39949
Cacti ≤ 1.2.30 has an authenticated OS command injection flaw. Users with device and graph template creation privileges can put shell metacharacters in a device’s notes field. Cacti’s variable replacement engine inserts that field, unsanitized, into RRDtool command-line arguments through the...
VulnCheck KEV: CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...
ROS-20261014-73-0171
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FreeBSD: VID-fac18f5f-afc2-11f1-8266-3c7c3fba4204 (CVE-2026-66877): Gitea -- multiple vulnerabilities
Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and...
PT-2026-113607
Name of the Vulnerable Software and Affected Versions Collabora Online Built-in CODE Server versions prior to 26.4.303 Description An OS command injection exists in the proxy.php endpoint of the richdocumentscode app. The issue occurs when the CODE server is not running, such as after a restart,...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Network Device Enrollment Service Code Execution
The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Bisection Component Protected Information Access
The vulnerability of the Bisection component in Google Chrome and Microsoft Edge is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created file...
PT-2026-113773
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
ROS-20261014-73-0053
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2026-114006
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 11.4.10 Drupal versions prior to 11.3.19 Drupal versions prior to 10.6.19 Description A remote code execution issue exists within the Field UI module. While the core software alone does not expose the flaw, contributed...