655588 matches found
openSUSE 16: rsyslog / rsyslog-devel / rsyslog-diag-tools / rsyslog-module-dtls / etc (openSUSE-SU-2026:22184-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22184-1 advisory. - CVE-2026-19654: imptcp regex-framing remote denial of service bsc1271910. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead...
Linux Distros Unpatched Vulnerability : CVE-2026-120208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of...
CentOS Linux 6 [TuxCare] Security Update: icu / libicu / libicu-devel / libicu-doc (CENTOS6:CLSA-2026:1793167763)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793167763 advisory. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed a...
openSUSE 16 Security Update : python-Brotli (openSUSE-SU-2026:22183-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22183-1 advisory. - CVE-2025-6176: denial of service DoS due to a flaw in its brotli decompression bsc1252945. - CVE-2026-111497: Brotli decoder out-of-bounds wri...
ExifTool 12.23 Arbitrary Code Execution
ExifTool versions 7.44 through 12.23 contain an arbitrary code execution vulnerability when parsing malicious DjVu files. This proof of concept generates a DjVu payload disguised as a JPEG. https://packetstorm.news/download/238757...
PUB-A-493831486
In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:22172-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22172-1 advisory. - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running...
PUB-A-517376690
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-530002430
In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-496614216
In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-508703594
In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-541987664
In multiple functions of rmmiutility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PHP 7.4 FPM Docker Image
This Docker build creates a PHP FPM image based on PHP version 7.4 with the PHP source backport for two remote code execution vulnerabilities...
WordPress Gravity Forms 3.1.2 PHP Object Injection
WordPress Gravity Forms version 3.1.2 and prior contain an unauthenticated PHP object injection vulnerability in Post Custom Field List inputs with content templates enabled. The included proof of concept identifies forms and fields and submits a supplied serialized payload...
F5 BIG-IP TMUI Remote Code Execution
F5 BIG-IP TMUI contains an unauthenticated remote code execution and local file inclusion vulnerability. This proof of concept can check a target, read target files, execute TMUI commands, and enumerate common target files. https://packetstorm.news/download/238764...
SUSE SLED15: libbrotli-devel / libbrotlicommon1 / libbrotlicommon1-32bit / etc (SUSE-SU-2026:4945-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4945-1 advisory. This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote...
Apache Struts 2 Core 7.4.0 OGNL Code Execution
Apache Struts 2 Core version 7.4.0 and below contain an OGNL security-bypass issue that can allow nested reflective calls to execute arbitrary code where attacker-controlled input is evaluated as OGNL. Description Apache Struts2 Core version 7.4.0 and below attempt to prevent arbitrary code...
ASB-A-486464711
In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-503505702
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-539619693
In IMGvkCreateImageView of imageview.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...