489804 matches found
CVE-2026-63130
The open source customer relationship management application EspoCRM is vulnerable to a path traversal flaw in the LabelManager (specifically during Custom Label saving) prior to version 9.3.10 . An authenticated administrator can provide crafted input to bypass insufficient path validation, allo...
CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability
A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...
EUVD-2026-102107
A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...
CVE-2026-79843
The HPE NonStop SQL/MX EXE component is affected by an out-of-bounds read vulnerability (CWE-125) caused by processing a corrupted file . This flaw can lead to information disclosure, process termination, CPU halt, or data corruption. The vulnerability affects product version T1051L40 and earlier...
CVE-2026-96596
A flaw was found in the Erlang OTP erltar module. An attacker can cause a Denial of Service DoS by supplying a specially crafted TAR archive containing a malformed GNU sparse file. When an application extracts the archive to disk, the extraction process enters an infinite loop, exhausting CPU...
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache MyFace (CVE-2026-68536, CVE-2026-76646)
Summary There are vulnerabilities in the Apache MyFace library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty when jsf-2.0, jsf-2.2, jsf-2.3, faces-3.0, faces-4.0 or faces-4.1 is enabled. Vulnerability Details CVEID:CVE-2026-76646 DESCRIPTION: A remote...
SUSE CVE-2026-90954
A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .deb archive with two data.tar members can exploit this...
EUVD-2026-102074
P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...
CVE-2026-103508 Path traversal via logging configuration in P4Search
P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...
rsync: Fix of 4 CVEs
CVE-2026-53801: prevent the sender from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside...
CLSA-2026-1791971338 rsync: Fix of 4 CVEs
CVE-2026-53801: prevent the sender from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside...
CVE-2026-106163 Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowser and ImageBrowser components render remotely supplied file and directory names as HTML without proper encoding. An attacker-controlled name containing script-related HTML can execute...
CVE-2026-98388
A flaw was found in the Linux kernel. During program execution, the kernel closes file descriptors marked for close-on-exec while holding an internal process state lock. If closing a file descriptor stalls on an unresponsive or user-space filesystem, the lock remains held and blocks related syste...
Exploit for CVE-2026-85097
CVE-2026-85097 Bricksforge = 3.1.8.9 unauthenticated file...
Malicious code in py-wormgpt (PyPI)
Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
CVE-2026-88794 XML External Entity injection in Sparx Enterprise Architect
Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-11940 DESCRIPTION: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink reference...
MAL-2026-17886 Malicious code in py-wormgpt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...
Malicious code in py-wormgpt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...
Shiny for Python has path traversal in bookmark restore
ImpactShiny for Python's bookmark-restore path accepted a client-supplied stateidquery-string value and joined it into the server-side bookmark directory/shinybookmarks/ without validating it. A value containing ..path segments, or an absolute path, could therefore cause the server to open andpar...