Lucene search
+L

257363 matches found

Positive Technologies
Positive Technologies
added 3 days ago10 views

PT-2026-64192

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

6.1AI score0.00434EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago3 views

GHSA-GX64-GJ6P-PC4C JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab

JupyterLab's image viewer allows for cross-site scripting XSS when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution RCE on the JupyterLab server. Impact This vulnerability allows for arbitrary...

7.5CVSS6.1AI score
SaveExploits0References9
NVD
NVD
added 4 days ago8 views

CVE-2025-50324

An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component...

8.8CVSS0.00363EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago5 views

MAL-2026-10996 Malicious code in init-js-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6005f6b51f3286b65f92b6c8dd73d51c744f89428bbb238f2186b61b7112e6c2 The package's postinstall lifecycle hook runs setup.js, which opens a TCP socket to the hardcoded remote endpoint 130.61.90.45:4443 and wires the...

6.4AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 4 days ago9 views

FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...

8.8CVSS8.2AI score0.00227EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 4 days ago9 views

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder

A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...

8.8CVSS8.5AI score0.01315EPSS
SaveExploits3References6
OSV
OSV
added 4 days ago4 views

GHSA-G3R5-9H93-4J2C n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

8.9CVSS6.5AI score0.00207EPSS
SaveExploits0References7
EUVD
EUVD
added 4 days ago6 views

EUVD-2026-47748

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

8.8CVSS6.3AI score0.0048EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-64831 FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

8.8CVSS0.0048EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago10 views

CVE-2026-46737

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability in the REST API. A high-privileged attacker with remote access could exploit this to achieve Remote execution. CVSS v3.1 base score 6.7 (MEDIUM); AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H. Th...

6.7CVSS5.5AI score0.00348EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago16 views

CVE-2026-16606

The CVE concerns Fujitsu Software openFT on Linux and Oracle Solaris, affected in openFT prior to version 12.1D00. Root cause is unauthenticated remote code execution (pre-auth RCE), enabling remote compromise without authentication. The vulnerability is rated critical with high impact to confide...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-16606 Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...

9.8CVSS0.00651EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago3 views

DEBIAN-CVE-2026-53910

diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds. When processing crafted...

2.1CVSS6.6AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago9 views

CVE-2026-53910

diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds. When processing crafted...

2.1CVSS0.00253EPSS
SaveExploits0References4
NVD
NVD
added 4 days ago8 views

CVE-2026-13186

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution...

8.1CVSS0.00495EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago7 views

CVE-2026-13190

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution...

8.1CVSS0.00452EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago7 views

CVE-2026-13185

In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution...

8.1CVSS0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 4 days ago4 views

CVE-2026-13036

A flaw was found in Blink, a rendering engine used in Google Chrome. This vulnerability, a 'use after free' error, allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a...

8.8CVSS6.1AI score0.00293EPSS
SaveExploits1References5
EUVD
EUVD
added 4 days ago6 views

EUVD-2026-47696

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution...

8.1CVSS6.1AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago7 views

CVE-2026-13190

The CVE affects Progress Telerik UI for ASP.NET AJAX. Before version 2026.2.708, the Persistence Framework’s deserialization utilities allow unsafe type instantiation from attacker-controlled persisted state, enabling remote code execution. Impact is high (network vector, no privileges required, ...

8.1CVSS6.2AI score0.00452EPSS
SaveExploits0References1
Rows per page
Query Builder