7889 matches found
CVE-2026-49918
Multiple functions are susceptible to a possible out of bounds write resulting from an integer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. While the specific affected software/hardware is not de...
acl: Symlink traversal privilege escalation via libacl functions
A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...
ROS-20260908-73-0092
The vulnerability of the Repo.blame and Repo.blameincremental functions in the GitPython library’s unsafegitrevisionoptions protection mechanism is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
PT-2026-87037
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...
EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-3337)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content...
EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-3262)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content...
PT-2026-88249
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-19634
PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a superuser subsequently calls anon.importdatabaserules or anon.importrolesrules, the malicious code is executed with...
EUVD-2026-72142
PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a superuser subsequently calls anon.importdatabaserules or anon.importrolesrules, the malicious code is executed with...
CVE-2026-19634
PostgreSQL Anonymizer is vulnerable to SQL injection in the anon.import_database_rules() and anon.import_roles_rules() functions. A user can craft a malicious JSON document with specially crafted object names; when a superuser subsequently calls one of these import functions, the injected code ex...
PT-2026-86536
PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a superuser subsequently calls anon.import database rules or anon.import roles rules, the malicious code is executed with...
CVE-2026-86152: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053258)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053258 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in ofthermal functions ofparsethermalzones parses the...
CVE-2026-86188
AVideo installations with the YPTSocket plugin enabled are affected by an unauthenticated cross-site scripting (XSS) vulnerability. Attackers can send crafted WebSocket messages whose callback names resolve to global functions such as avideoConfirmHTML, which assign untrusted data to innerHTML, e...
CVE-2026-84961
A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...
SurrealDB allows bypass of deny-net flags via DNS resolution
SurrealDB offers http functions that can access external network endpoints. A typical, albeit not recommended configuration would be to start SurrealDB with all network connections allowed with the exception of a deny list. For example, surreal start --allow-net --deny-net 10.0.0.0/8 will allow a...
GHSA-M3C3-78FH-W3W7 SurrealDB allows bypass of deny-net flags via DNS resolution
SurrealDB offers http functions that can access external network endpoints. A typical, albeit not recommended configuration would be to start SurrealDB with all network connections allowed with the exception of a deny list. For example, surreal start --allow-net --deny-net 10.0.0.0/8 will allow a...
EUVD-2025-210490
SurrealDB allows bypass of deny-net flags via DNS resolution...