259588 matches found
MiracleLinux 9 : samba-4.23.5-10.el9_8 (AXSA:2026-1321:09)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1321:09 advisory. samba: Missing access check on reparse point operations CVE-2026-1933 samba: vfsworm does not block directory modification CVE-2026-2340 samba: grou...
PT-2026-63353
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.30.1 n8n versions prior to 2.29.8 Description The Token Exchange module assigns all Public API key scopes to issued JSON Web Tokens JWTs, ignoring the actual role of the acting user. In environments where the Token...
PT-2026-63323
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete locations backup file callback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level...
PT-2026-63423
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...
EUVD-2025-210498
An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
CVE-2025-50324
An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component...
PT-2026-63404
Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description A deserialization issue in the persistence utilities allows unsafe type instantiation from an attacker-influenced persisted state, which can lead to remote code execution...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
Plone 4.3.x < 5.2.5 Multiple Vulnerabilities (HF 20210518)
The version of Plone installed on the remote host is 4.3.x prior to 5.2.5. It is, therefore, affected by the following vulnerabilities: - Plone CMS has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. CVE-2021-3313 -...
EUVD-2025-210502
An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component...
CVE-2025-50324
CVE-2025-50324 affects Milos Paripovic OneCommander v3.96.0.0. The issue allows a remote attacker to execute arbitrary code via the OneCommander.exe component. CVSS 3.1 base score 8.8 (NETWORK/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Documents do not provide exploitation details or remediation guida...
PT-2026-63489
Name of the Vulnerable Software and Affected Versions Milos Paripovic OneCommander version 3.96.0.0 Description A flaw in the OneCommander.exe component allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a...
The vulnerability of the Microsoft .NET Framework software lies in its lack of data protection mechanisms, which allows attackers to execute arbitrary code.
The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code within the browser’s sandbox.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the browser’s sandbox through the created...
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...
PT-2026-63395
Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description Forged upload metadata can influence the processing of AsyncUploadTypeName, leading to unsafe attacker-controlled type resolution. This flaw allows for remote code execution in...
PT-2026-63374
A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...
ROS-20260722-73-0009
The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...
ROS-20260722-73-0027
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...