Lucene search
+L

1110280 matches found

RedHat Linux
RedHat Linux
added yesterday4 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS6.5AI score0.00454EPSS
SaveExploits0References5
NVD
NVD
added yesterday5 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS0.00095EPSS
SaveExploits0References2
NVD
NVD
added yesterday5 views

CVE-2026-16881

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS0.00262EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-16548

The Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat WordPress plugin before 1.8.2 does not validate the type, extension, content, or size of files submitted to its public response endpoint and stores them under the uploads directory, so an...

6.1AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-16623

The CVE concerns the Create Block WordPress plugin (before 2.10.0). It fails to properly escape user input when writing to a generated PHP pattern file, enabling a multisite subsite administrator—who has the gating capability for this action but lacks the PHP file editing capability—to inject and...

8CVSS6AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday20 views

CVE-2026-16618 ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...

0.00203EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-52579

The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite administrator who holds the capability gating this action but is denied the capability that normally gates PHP file editin...

8CVSS6AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-52578

The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...

9.8CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday21 views

CVE-2026-16623 Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)

The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite administrator who holds the capability gating this action but is denied the capability that normally gates PHP file editin...

0.00153EPSS
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-16618

The CVE concerns the WordPress plugin Improve SEO (version up to 2.0.11). The vulnerability arises from improper validation of uploaded files: the plugin checks only the file content type while saving the file with an attacker-supplied extension into a publicly accessible directory. This allows u...

9.8CVSS5.9AI score0.00203EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3
Cvelist
Cvelist
added yesterday23 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS0.00095EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday7 views

EUVD-2026-52577

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
CVE
CVE
added yesterday13 views

CVE-2026-18739

The CVE concerns the popt library, specifically a vulnerability in the function poptStuffArgs . An off-by-one condition occurs when the function is called repeatedly by a host application or through deep alias nesting, which can corrupt internal program data. The description states this corruptio...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday9 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3
CVE
CVE
added yesterday22 views

CVE-2026-16881

The LINE Android app (before 26.7.2) contains a vulnerability in the profile rendering component where externally supplied script content embedded in profile templates is not adequately validated or sandboxed. This can allow crafted profile content to execute arbitrary code with the app’s privile...

8.7CVSS5.7AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday21 views

CVE-2026-16881

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS0.00262EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-52574

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS5.7AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added yesterday7 views

CVE-2026-40553

A flaw was found in gawk. A buffer overflow vulnerability exists in the ftype routine, located in the extension/readdir.c program file. This vulnerability could allow an attacker to crash the program, resulting in a denial of service. It may also potentially lead to arbitrary code execution, thou...

7.5CVSS6AI score0.00291EPSS
SaveExploits0References5
Rows per page
Query Builder