A use-after-free vulnerability in Ashlar-Vellum Cobalt XE file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations during XE file parsing.
A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt's AR file parsing functionality. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data length before copying it to a heap buffer.
A use-after-free vulnerability exists in Ashlar-Vellum Cobalt XE file parsing that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations, enabling code execution in the context of the current process.
CVE-2026-13269 is a denial-of-service vulnerability in Quest NetVault Backup caused by a numeric truncation error in the StnzCreateKey function. This flaw allows remote attackers to cause a denial-of-service without requiring authentication by exploiting improper validation of user-supplied data.
CVE-2026-13270 is an integer underflow vulnerability in the nvpmgr service of Quest NetVault Backup. This flaw allows unauthenticated remote attackers to cause a denial-of-service (DoS) by sending specially crafted data to the service listening on UDP port 20031. The vulnerability arises from improper validation of user input leading to an integer underflow before buffer allocation.
A vulnerability in ToolJet versions up to 3.20.256-lts and 3.21.93-beta affects the onboarding signup endpoint. The flaw exists in the activateUserWithPassword function, where manipulation of the email argument can bypass authentication. This vulnerability can be exploited remotely. Public exploit code has been disclosed. Upgrading to version 3.21.94-beta resolves the issue.
A use-after-free vulnerability in Trimble SketchUp's SKP file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of object existence before operations, leading to code execution in the context of the current process.
A SQL Injection vulnerability in the Philips Hue Bridge Pro allows network-adjacent attackers to execute arbitrary code with root privileges. Exploitation requires authentication, but the authentication mechanism can be bypassed. The flaw is in the HTTP service on TCP port 443 due to improper validation of user input used in SQL queries.
CVE-2026-118631 is a vulnerability in Philips Hue Bridge Pro affecting the factory data service that listens on TCP port 5001. It allows a local attacker with low-privileged code execution within a container to perform argument injection, leading to restricted file write capabilities. The flaw arises from improper validation of user-supplied strings before executing system calls, enabling modification of files under the service account context. The vulnerability has a low CVSS score of 3.8 and does not have known exploits in the wild.
Data::Dump::Streamer versions before 3.00 for Perl contain a code injection vulnerability via unescaped regular expression patterns in the _dump_qr function. This occurs because certain characters in regex patterns are not properly escaped, allowing embedded code to execute when the dumped data is later evaluated. An attacker supplying a crafted regex pattern that is compiled, dumped, and restored with eval or do can execute arbitrary Perl code.
A Cross-Site Scripting (XSS) vulnerability exists in ExpressTech Quiz And Survey Master (quiz-master-next) up to version 11.3.0 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code that could be executed in the context of a user's browser. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.
A missing authorization vulnerability exists in ExpressTech Quiz And Survey Master (quiz-master-next) up to version 11.3.0. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized users with limited privileges to perform actions beyond their intended permissions. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level with low complexity and no user interaction required.
CVE-2026-114556 is a directory traversal vulnerability in MailEnable's Save method that allows remote attackers to create arbitrary files without authentication. The flaw arises from insufficient validation of user-supplied paths, enabling file creation outside intended directories. This vulnerability has a high severity score of 7.4 and could be leveraged with other vulnerabilities for code execution at SYSTEM level.
A heap-based buffer overflow vulnerability exists in libilbm's ILBM file parsing functionality. This flaw allows remote attackers to execute arbitrary code by supplying malicious ILBM files. Exploitation requires user interaction, such as opening a crafted file or visiting a malicious page. The vulnerability arises from improper validation of user-supplied data length before copying to a heap buffer.
A local vulnerability exists in rmalright TR-VISION HOME 2.0.5 affecting the IOCTL Handler component in the WFanManager.sys library. The flaw involves incorrect default permissions due to manipulation in the sub_11504 function. This vulnerability has a high severity score and can lead to complete compromise of confidentiality, integrity, and availability if exploited. The vendor has not responded to disclosure requests, and no patch or mitigation guidance is currently available.
A stored cross-site scripting (XSS) vulnerability exists in Crocoblock JetEngine up to version 3.9.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts that execute in the context of a user's browser.
.NET 9.0 for Red Hat Enterprise Linux has multiple security vulnerabilities including information disclosure, elevation of privilege, and denial of service affecting ASP.NET Core and .NET components. These issues are addressed in an update to SDK 9.0.124 and Runtime 9.0.23. The update is rated as important by Red Hat Product Security.
Two security vulnerabilities were identified in the perl-DBI package used in Red Hat Enterprise Linux 9. The first allows loading arbitrary modules via unvalidated attributes in DBD::DBM (CVE-2026-78030). The second is a denial of service caused by an invalid memory read during numeric type casting (CVE-2026-88815). Red Hat has issued an important security update to address these issues.
A use-after-free vulnerability (CVE-2026-125704) exists in the GStreamer core buffer value deserialization component of the gstreamer1 streaming media framework. This flaw could lead to memory corruption issues. Red Hat has issued a security update for gstreamer1 in Red Hat Enterprise Linux 9 to address this vulnerability.