Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.2 views

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

7.5CVSS5.5AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 6:16 p.m.2 views

CVE-2026-20846

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network...

7.5CVSS0.00064EPSS
Exploits0References1
Circl
Circl
added 2026/02/10 5:30 p.m.1 views

CVE-2026-20846

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053...

7.5CVSS5.1AI score0.00064EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:44 a.m.4 views

CVE-2019-20846

An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage...

7.5CVSS7AI score0.00209EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-20846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 all...

6.5CVSS6.8AI score0.00456EPSS
Exploits0References3
Circl
Circl
added 2024/11/15 3:53 p.m.2 views

CVE-2022-20846

creationtimestamp| type| source ---|---|--- 2024-11-15 15:53:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113487774426931848...

4.3CVSS6.9AI score0.01976EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.10 views

CVE-2024-20846

Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code...

5.9CVSS7.3AI score0.00083EPSS
Exploits0References1
CVE
CVE
added 2023/09/04 2:27 a.m.60 views

CVE-2023-20846

CVE-2023-20846 concerns MediaTek chips where the vulnerability resides in the imgsys_cmdq path, caused by missing valid range checking that enables an out-of-bounds read. The documented impact is local information disclosure with system-level execution privileges required, and exploitation report...

4.2CVSS4AI score0.00023EPSS
Exploits0References1Affected Software4
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.1 views

SUSE CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

5.5CVSS6.9AI score0.00456EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/11/21 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2022:4082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.00841EPSS
Exploits0References9
OSV
OSV
added 2022/11/18 2:44 p.m.5 views

SUSE-SU-2022:4082-1 Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2018-20846: Fixed an Out-of-bounds accesses in pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi. bsc1140205 - CVE-2018-21010: Fixed a heap buffer overflow in colorapplyiccprofile in bin/common/color...

8.8CVSS6.8AI score0.00841EPSS
Exploits0References13
OpenVAS
OpenVAS
added 2022/10/28 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2022:3802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.00924EPSS
Exploits1References11
OpenVAS
OpenVAS
added 2022/04/08 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2022:1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.04509EPSS
Exploits3References15
Circl
Circl
added 2021/11/24 6:27 p.m.1 views

CVE-2021-20846

creationtimestamp| type| source ---|---|--- 2021-11-24 18:27:08+00:00| seen| https://t.me/cibsecurity/32953...

8.8CVSS6.1AI score0.00163EPSS
Exploits0References1
NVD
NVD
added 2021/11/24 4:15 p.m.6 views

CVE-2021-20846

Cross-site request forgery CSRF vulnerability in Push Notifications for WordPress Lite versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page...

8.8CVSS0.00163EPSS
Exploits0References3
CVE
CVE
added 2021/11/24 8:25 a.m.39 views

CVE-2021-20846

The CVE-2021-20846 entry concerns the WordPress plugin Push Notifications for WordPress (Lite) before version 6.0.1. The connected sources confirm a Cross-site Request Forgery (CSRF) vulnerability that can allow an authenticated administrator to be hijacked to perform arbitrary actions via a craf...

8.8CVSS8.8AI score0.00163EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/11/24 8:25 a.m.12 views

CVE-2021-20846

Cross-site request forgery CSRF vulnerability in Push Notifications for WordPress Lite versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page...

9.1AI score0.00163EPSS
Exploits0References3
Circl
Circl
added 2020/06/19 6:55 p.m.0 views

CVE-2019-20846

creationtimestamp| type| source ---|---|--- 2020-06-19 18:55:17+00:00| seen| https://t.me/cibsecurity/12881...

7.5CVSS7.4AI score0.00209EPSS
Exploits0References1
CVE
CVE
added 2020/06/19 1:29 p.m.34 views

CVE-2019-20846

CVE-2019-20846 affects Mattermost Server before 5.18.0, with weak permissions for server-local file storage. The issue is described across multiple sources (NVD, Red Hat, OSV, CNVD) as a vulnerability with network access and high impact on confidentiality (CVSSv3.1: 7.5; AV:N/AC:L/PR:N/UI:N/S:U/C...

7.5CVSS7.5AI score0.00209EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/06/26 5:7 p.m.87 views

CVE-2018-20846

CVE-2018-20846 affects OpenJPEG up to version 2.3.0. The vulnerability is an out-of-bounds/ crash issue in multiple pi_next_* helpers (openmj2/pi.c) that can lead to a denial of service. Connected advisories (SUSE/OpenJPEG updates) indicate fixes are provided in subsequent security updates; the S...

6.5CVSS6.5AI score0.00456EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder