UBUNTU-CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

UBUNTU-CVE-2026-106574

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

ROS-20261008-73-0281

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-108289

Name of the Vulnerable Software and Affected Versions Strawberry GraphQL versions 0.217.0 through 0.326.0 Description In the PermissionExtension.resolve function on a synchronous field resolver, the result of has permission is evaluated for truthiness. If a custom permission defines has permissio...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...

Origin Validation Error

Overview next is a react framework. Affected versions of this package are vulnerable to Origin Validation Error via the MCP middleware get-mcp-middleware.ts and the cross-site dev request blocker block-cross-site-dev.ts, which fail to adequately validate the request origin against the host. An...

Origin Validation Error

Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Origin Validation Error via getExternalFile in packages/payload/src/uploads/getExternalFile.ts, where the origin of an external file request URL is not validate...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The golang.org/x/text library, specifically within the x/text/secure/precis component, contains a vulnerability where the Nickname profile can panic due to an out-of-bounds slice error . This occurs when the software attempts to transform crafted input into a short destination buffer. Exploitatio...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

EUVD-2026-94532

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-106574

A flaw was found in ImageMagick. An attacker connected to the distributed pixel cache server can send crafted pixel data that triggers an integer calculation error, leading to a heap buffer overwrite. This issue causes the server to crash, resulting in a Denial of Service DoS...

CVE-2026-106571

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS by issuing a specially crafted call to the GetVirtualPixels function. An integer calculation error allows data to be written beyond allocated heap memory boundaries, resulting in an unexpected process crash...

CVE-2026-106567

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by providing a specially crafted Photoshop Document PSD file for processing. Due to an integer-conversion error in the PSD decoder on 32-bit systems, the application enters an infinite loop, causing it to hang and beco...

CVE-2026-107272

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

DEBIAN-CVE-2026-106574

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...