410105 matches found
APSB26-110 : Security update available for Content Credentials SDK
Adobe has released a security update for Content Credentials SDK. This update addresses critical and important vulnerabilities that could result in application denial-of-service and arbitrary file system read...
The vulnerability of the cifs_set_cifscreds() function in the fs/smb/client/connect.c module of the Smb file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cifssetcifscreds function in the fs/smb/client/connect.c module of the Smb file system in Linux kernel is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `ceph_get_snapdir()` function in the `fs/ceph/inode.c` module of the distributed file system support module for Linux kernels allows a attacker to cause a service failure.
The vulnerability of the cephgetsnapdir function in the fs/ceph/inode.c module of the distributed file system support module for Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause service...
Linux Distros Unpatched Vulnerability : CVE-2026-78475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the...
TencentOS Server 4: python3.11 (TSSA-2026:0861)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0861 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Linux Distros Unpatched Vulnerability : CVE-2026-66897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, ...
Vulnerability of functions __ext4_iget() (fs/ext4/inode.c) and swap_inode_boot_loader() (fs/ext4/ioctl.c) in the Ext4 file system of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the ext4iget function fs/ext4/inode.c and the swapinodebootloader function fs/ext4/ioctl.c in the Ext4 file system of the Linux operating system is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a servi...
DEBIAN-CVE-2026-53532
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
CVE-2026-32560
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2026-32559
UltimateAI is a WordPress plugin affected by an arbitrary file upload vulnerability in versions ≤ 3.1.0 . A user with Subscriber privilege level can upload arbitrary files without user interaction, with a scope change that allows full compromise of confidentiality, integrity, and availability (CV...
CVE-2026-32560
MagicAI for WordPress (AI Text, Image, Chat, Code, and Voice Generator) plugin versions ≤ 1.4 are affected by a Local File Inclusion (LFI) vulnerability accessible to authenticated users with the Subscriber role. The vulnerability is rated CVSS 8.8 (HIGH) by Patchstack, with a network attack vect...
CVE-2026-32559 WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
CVE-2026-78284 WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
CVE-2026-78284
CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...
CVE-2026-7455
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...