258801 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-17712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromi...
PT-2026-66558
Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An unauthenticated remote code execution issue exists in the '/load lora adapter from tensors' endpoint. This occurs due to a bypass of the SafeUnpickler's incomplete denylist, which allows an...
PT-2026-66469
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...
Linux Distros Unpatched Vulnerability : CVE-2026-17956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-17922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page...
PT-2026-66331
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...
PT-2026-66298
Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2026-17719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-17705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
MantisBT 1.3.0 < 2.28.4 RCE (GHSA-v84x-qvhg-f36r)
The version of MantisBT installed on the remote host is 1.3.0 or later but prior to 2.28.4. It is, therefore, affected by a vulnerability: - A remote code execution vulnerability exists in the admin Manage Configuration feature admconfigset.php. When setting a configuration value with a non-strin...
Linux Distros Unpatched Vulnerability : CVE-2026-17918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-17725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
PT-2026-66600
Name of the Vulnerable Software and Affected Versions Wolf CMS versions prior to 0.8.3.2 Description An issue in the FileManagerController allows authenticated attackers with the file manager mkfile capability to achieve remote code execution. This is possible due to missing file extension...
CVE-2026-51292
CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...
PT-2026-66655
Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. That environment typically holds secret key base and often credentials for external systems, whic...
PT-2026-66561
Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description Remote Code Execution is possible when loading model weights from a HuggingFace repository. The issue occurs at the '/update weights from disk' endpoint, where a fallback to torch.load...,...
Linux Distros Unpatched Vulnerability : CVE-2026-17896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-17807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-17881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...