341643 matches found
Magento Open Source 2.4.9-2026-aug Template Engine Remote Code Execution
Magento Open Source versions through 2.4.9-2026-aug contain an unauthenticated template engine flaw that can allow arbitrary code execution. The included proof of concept uses GraphQL requests to trigger the issue. https://packetstorm.news/download/237645...
ROS-20261026-73-0088
The vulnerability in openssh relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-125505
Name of the Vulnerable Software and Affected Versions Pixar Animation Studio OpenUSD affected versions not specified Description A flaw in the parsing of USDC and USDZ files allows remote attackers to execute arbitrary code. The issue occurs because the software fails to validate the existence of...
Sony neural network library input validation error vulnerability
Versions 1.39.0 and earlier of Sony’s neural network libraries contain a security vulnerability. This vulnerability stems from a code injection issue in the loadparamintxt function within the python/src/nnabla/utils/cli/encodedecodeparam.py file in the Encode Param Command Handler component,...
PT-2026-123357
boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system commands. An unauthenticated attacker on the local network can deploy a malicious flow to achieve...
boneIO Black authorization issue vulnerability
In boneIO Black versions 1.3.0 through 1.6.0, there is an authorization issue vulnerability. This vulnerability arises because Caddy acts as a reverse proxy, exposing Node-RED instances on the /nodered path without authentication. The Node-RED Admin API permits the deployment of streams capable o...
Tenable Security Center Multiple Vulnerabilities (TNS-2026-30)
According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-30 advisory. - PHP uses longjmp for out-of-memory OOM...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146096)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146096 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146098)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146098 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Meta FAIRChem dense_eval dft-targets Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
Meta FAIRChem run_validation Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
Meta FAIRChem Adsorbate Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
Meta FAIRChem ion_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
Meta FAIRChem OMolRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of...
Meta FAIRChem load_and_preprocess_data Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within th...
PHP Memory Corruption Vulnerability
PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution...
CVE-2022-22947
CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway In the first quarter of 2022, an interesting and critical base score of 10.0 Spring Cloud Gateway Code Injection vulnerability was discovered leveraging the Actuator API to perform SpEL Injection, potentially leading to system compromise. Spring...
