40944 matches found
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
EUVD-2026-74613
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
CVE-2026-6485: Active Debug Code
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
PT-2026-88810
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
TencentOS Server 3: libxml2 (TSSA-2026:0993)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0993 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Joern 4.0.624
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
PT-2026-89209
Name of the Vulnerable Software and Affected Versions webhookd versions prior to 1.22.0 Description Deployments without htpasswd authentication forward all incoming HTTP headers into the hook script environment via the HTTPParamsToShellVars function in pkg/api/index.go without using an allowlist...
SUSE CVE-2026-74859
The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that man...
CVE-2026-78630
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
CVE-2026-78630
CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...
EUVD-2026-74182
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
