Lucene search
+L

23830 matches found

OSV
OSV
added 2026/07/13 2:20 p.m.3 views

PYSEC-2026-2325 Information disclosure in AccessControl

Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

6.8CVSS7.1AI score0.00519EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 2:19 p.m.3 views

PYSEC-2026-3321 TensorFlow vulnerable to segfault when opening multiframe gif

Impact Integer overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames. python import urllib.request dat =...

6.5CVSS6.7AI score0.00305EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/07/13 1:26 p.m.77 views

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

8.4CVSS6.5AI score0.00529EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/07/13 6:0 a.m.6 views

CVE-2026-10551

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

6.2AI score0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.18 views

PT-2026-59665

Impact A Python operator precedence bug in pyzipper/zipfile aes.py caused the AE-2 format to never be automatically selected during encryption, regardless of file size or compression type. As a result, all encrypted entries are written in AE-1 format unless AE-2 is explicitly forced by the caller...

6.2CVSS6.1AI score0.00087EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/12 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-61861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...

7.5CVSS6AI score0.00323EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/12 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-61870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by...

7.5CVSS5.9AI score0.00191EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/07/11 2:34 p.m.7 views

Use After Free

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.5CVSS5.9AI score0.00323EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:34 p.m.4 views

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS5.9AI score0.00323EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:34 p.m.6 views

Use After Free

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS5.9AI score0.00323EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/11 2:16 p.m.4 views

DEBIAN-CVE-2026-61861

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution...

7.5CVSS6.2AI score0.00323EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/07/11 1:1 p.m.7 views

CVE-2026-61861

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution...

7.5CVSS6.2AI score0.00323EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/11 1:1 p.m.4 views

CVE-2026-61861

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution...

6.3CVSS6.2AI score0.00323EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/11 1:1 p.m.5 views

CVE-2026-61861 ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution...

6.3CVSS6.2AI score0.00323EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/11 1:1 p.m.29 views

CVE-2026-61861

CVE-2026-61861 affects ImageMagick prior to 7.1.2-26. A use-after-free in the FormatMagickCaption path occurs when memory allocation fails, allowing a dangling pointer to reference freed memory. This can lead to denial of service or potentially arbitrary code execution. Multiple sources (NVD, Deb...

7.5CVSS6.2AI score0.00323EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/07/11 8:1 a.m.5 views

ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

...

7.5CVSS7AI score0.005EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/11 8:1 a.m.5 views

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

...

7.5CVSS7AI score0.005EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/11 8:1 a.m.7 views

ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability

...

7.5CVSS7AI score0.005EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/11 8:1 a.m.9 views

ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability

...

7.5CVSS7AI score0.00563EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/11 8:1 a.m.7 views

ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability

...

7.5CVSS7AI score0.00563EPSS
SaveExploits0
Rows per page
Query Builder