13 matches found
Fedora 43 : gdk-pixbuf2 (2026-cf5d926f46)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf5d926f46 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...
Fedora 44 : gdk-pixbuf2 (2026-461d7d7380)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-461d7d7380 advisory. Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable has extracted the preceding description block directly from the Fedora...
Linux Distros Unpatched Vulnerability : CVE-2026-16768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occ...
BELL-CVE-2026-16768
Bulletin has no description...
CVE-2019-16768
In affected versions of Sylius, exception messages from internal exceptions like database exception are wrapped by \Symfony\Component\Security\Core\Exception\AuthenticationServiceException and propagated through the system to UI. Therefore, some internal system information may leak and be visible...
CVE-2019-16768
creationtimestamp| type| source ---|---|--- 2024-03-07 16:12:06+00:00| seen| https://t.me/ctinow/202527...
CVE-2020-16768
CVE-2020-16768 entry is rejected/not used per the Initial Description.
CVE-2019-16768
CVE-2019-16768 affects Sylius: internal exception messages from login errors could leak system details to users. The root cause is exception messages from internal exceptions (e.g., database errors) being wrapped and surfaced in the UI via the login flow. Affected versions are fixed in Sylius rel...
CVE-2018-16768
CVE-2018-16768 affects WAVM (WebAssembly Virtual Machine). A heap-buffer-overflow in IR::FunctionValidationContext::end, triggered by a crafted input file up to 2018-07-26, may cause a denial of service (application crash) and possibly unspecified other impact. The vulnerability is documented acr...
CVE-2017-16768
Cross-site scripting XSS vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter...
CVE-2017-16768
CVE-2017-16768 is a cross-site scripting (XSS) vulnerability in the User Policy editor of Synology MailPlus Server prior to version 1.4.0-0415. The issue allows remote authenticated users to inject arbitrary HTML via the name parameter, with impact described as partial integrity impact and low co...
sunglasshut.com XSS vulnerability
Vulnerable URL: https://www.sunglasshut.com/UserRegistrationForm?new=Y="" aa =-1=10152 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16768 VIP website status:| Yes Check sunglasshut.com SSL connection:| Grade: ...