CVE-2026-76611: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo 4.1.66...

PT-2026-79429

Name of the Vulnerable Software and Affected Versions Element Web versions prior to 1.12.22 Description The EmbeddedPage component in apps/web/src/components/structures/EmbeddedPage.tsx renders homepage content supplied by the homeserver using dangerouslySetInnerHTML without utilizing...

CVE-2026-55850: Improper Neutralization of Input During Web Page Generation

Element Web is a Matrix web client built using the Matrix React SDK. Prior to 1.12.22, EmbeddedPage in apps/web/src/components/structures/EmbeddedPage.tsx renders homeserver-supplied homepage content through dangerouslySetInnerHTML without passing it through sanitizedHtmlNode. A malicious...

CVE-2026-55013: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

EUVD-2026-62871

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16844 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-74803

The Joomla Zoo extension (versions before 4.1.64) accepts arbitrary files via its image element when the client-supplied Content-Type falls within the image MIME group, enabling unauthenticated remote code execution. No exploitation details are provided; update to Zoo 4.1.64 or later. CVSS 4.0 sc...

PT-2026-78605

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands. Recommendations At the moment, there is no...

PT-2026-78366

Name of the Vulnerable Software and Affected Versions Zoo versions prior to 4.1.64 Description An unauthenticated arbitrary file upload issue exists in the image element. The system accepts arbitrary files as long as the client-supplied Content-Type falls within the image MIME group Multipurpose...

ROS-20260819-73-0029

The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-74803: Unrestricted Upload of File with Dangerous Type

Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group...

CVE-2026-74804: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...

CVE-2026-75838: Improper Neutralization of Input During Web Page Generation

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned...

TencentOS Server 4: gstreamer1-plugins-bad-free (TSSA-2026:0849)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0849 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-74336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is...

CVE-2026-56090

Dell ObjectScale versions before 4.3.0.1 have an Uncontrolled Search Path Element flaw exploitable by a low-privileged local attacker to elevate privileges; no exploitation or in-the-wild activity is documented in the provided documents.

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-65914

A flaw was found in DOMPurify. This vulnerability, a type of Cross-Site Scripting XSS, occurs when HTML that has been sanitized is reinserted into specific parsing contexts using innerHTML with certain HTML elements like script or iframe. An attacker can craft malicious input that, during...

CVE-2026-56090: Uncontrolled Search Path Element

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...