6 matches found
CVE-2026-15392
The DBD::File component in the Perl DBI framework (versions before 1.651 ) is vulnerable to a path traversal flaw. The complete_table_name method fails to verify if a table file is a symbolic link . An attacker could use a link within the data directory to point to a file outside the configured f...
CVE-2026-0487 DLL Hijacking vulnerability in SAProuter on Microsoft Windows
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...
CVE-2026-0487
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...
Unity Runtime 参数注入漏洞
Unity Runtime is an underlying system responsible for executing logic, rendering, physics and interaction from Unity, Inc. in the United States. A parameter injection vulnerability exists in versions of Unity Runtime prior to 2025-10-02, which stems from a parameter injection that could lead to t...
[BSA-065] Security Update for puppet
Micah Anderson uploaded new packages for puppet which fixed the following security problems: CVE-2012-1053 and CVE-2012-1054 CVE-2012-1053 Puppet runs execs with an unintended group privileges, potentially leading to privilege escalation. CVE-2012-1054 The k5login type writes to untrusted...
