Microsoft Edge (Chromium-based) buffer error vulnerability

Microsoft Edge Chromium-based versions prior to 154.0.4258.37 contain a buffer error vulnerability stemming from a heap buffer overflow. This vulnerability may allow unauthenticated attackers to execute arbitrary code over the network...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a code injection vulnerability. This vulnerability stems from improper neutralization of special elements used in OS commands, potentially allowing remote attackers to execute arbitrary code...

Microsoft Edge (Chromium-based) resource management error vulnerability

A resource management error vulnerability exists in Microsoft Edge Chromium-based versions from 1.0.0.0 up to and including 155.0.4283.45. This vulnerability stems from use-after-free issues and may allow unauthorized attackers to execute code over the network...

PT-2026-132882

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description A use after free issue exists in the FileSystem component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially...

PT-2026-132876

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description An integer overflow occurs during editing processes, which could allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted...

PT-2026-132875

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79 Description Memory corruption occurs in the DOM Document Object Model, which is the programming interface for HTML and XML documents. This issue allows a remote attacker to potentially execute...

VMware ESX Code Execution

The vulnerability in the VMware ESX hypervisor is related to security configuration errors. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

J-Web Management Tool Code Execution

The vulnerability in the web interface of the J-Web management tool for Juniper Networks Junos OS and Junos OS Evolved stems from flaws in the authentication process. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code with elevated privileges...

CVE-2026-85897: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

MiracleLinux 8 : dotnet10.0-10.0.113-1.el8_10 (AXSA:2026-2163:22)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2163:22 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Servic...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-147021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147021 advisory. LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a lin...

MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickle files...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection vulnerability. This vulnerability stems from improper control over code generation and may allow remote attackers to execute arbitrary code...

PT-2026-130648

Name of the Vulnerable Software and Affected Versions Chat AI with Dispatcher versions prior to 2.4 Description An issue exists where uploaded files are not properly validated, as the system relies solely on a spoofable client-supplied content type. This allows unauthenticated attackers to upload...

PT-2026-132234

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

CVE-2026-110196: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to…

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

PT-2026-132819

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-115245: Unknown Chat AI with Dispatcher: The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a…

The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution...

Microsoft Edge (Chromium-based) buffer error vulnerability

Microsoft Edge Chromium-based versions from 1.0.0.0 up to and including 154.0.4258.37 contain a buffer error vulnerability. This vulnerability stems from a heap buffer overflow and may allow unauthorized attackers to execute code over the network...

ArubaOS 10.4.x < 10.4.1.14 / 10.7.x < 10.7.2.7 / 10.8.x < 10.8.1.2 Multiple Vulnerabilities (HPESBNW05162)

The version of ArubaOS AOS-10 installed on the remote host is affected by multiple vulnerabilities as referenced in the HPESBNW05162 advisory: - Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted...