Lucene search
+L

5291 matches found

SUSE CVE
SUSE CVE
added 2026/05/16 1:11 a.m.11 views

SUSE CVE-2026-43909

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the loop index expression i 4 inside SwapRGBABytes causes the function to compute a large negative...

8.8CVSS5.9AI score0.00371EPSS
SaveExploits1References3
Circl
Circl
added 2026/05/15 6:32 a.m.15 views

CVE-2026-7525

creationtimestamp| type| source ---|---|--- 2026-05-15 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlupjlfta42h...

4.3CVSS5.8AI score0.00341EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/15 1:59 a.m.19 views

SUSE CVE-2026-33376

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask usually /128 to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here...

7.4CVSS5.8AI score0.00282EPSS
SaveExploits0References7
NVD
NVD
added 2026/05/14 8:17 p.m.19 views

CVE-2026-43905

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, jpeg2000input.cpp:395 computes buffer size as const int bufsize = w h ch bufferbpp using signed 32-bit arithmetic. When the product...

7.8CVSS0.00173EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/05/14 7:01 p.m.16 views

EUVD-2026-30413

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the pixel-loop index expression i 3 inside ConvertCbYCrYToRGB causes the function to compute a larg...

8.8CVSS5.9AI score0.00371EPSS
SaveExploits1References1
NVD
NVD
added 2026/05/14 11:16 a.m.37 views

CVE-2026-8295

An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "stringbuilder::escapeandappend" when processing very large input strings on platforms with limited "sizet" width e.g., 32-bit builds. The overflow can cause insufficient buffer...

6.9CVSS0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/14 10:27 a.m.21 views

CVE-2026-8295 Integer overflow in simdjson

An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "stringbuilder::escapeandappend" when processing very large input strings on platforms with limited "sizet" width e.g., 32-bit builds. The overflow can cause insufficient buffer...

6.9CVSS5.9AI score0.00279EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/14 10:27 a.m.29 views

CVE-2026-8295

An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "stringbuilder::escapeandappend" when processing very large input strings on platforms with limited "sizet" width e.g., 32-bit builds. The overflow can cause insufficient buffer...

6.9CVSS5.9AI score0.00279EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.25 views

PT-2026-41024

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, jpeg2000input.cpp:395 computes buffer size as const int bufsize = w h ch buffer bpp using signed 32-bit arithmetic. When the product...

7.1CVSS6AI score0.00173EPSS
SaveExploits1References2
NVD
NVD
added 2026/05/13 4:16 p.m.23 views

CVE-2026-43476

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...

7.8CVSS0.00121EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/13 9:34 a.m.11 views

SUSE-SU-2026:21615-1 Security update for ImageMagick

This update for ImageMagick fixes the following issue - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528...

5.7CVSS6AI score0.00093EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/05/13 6:58 a.m.22 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/05/13 4:43 a.m.17 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/05/12 11:31 p.m.27 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits1References6
Microsoft Security Update
Microsoft Security Update
added 2026/05/12 5:00 p.m.109 views

2026-05 .NET 9.0.16 Security Update for x86 Client (KB5093448)

2026-05 .NET 9.0.16 Security Update for x86 Client KB5093448...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2026/05/12 5:00 p.m.31 views

2026-05 .NET 8.0.27 Security Update for x86 Client (KB5093447)

2026-05 .NET 8.0.27 Security Update for x86 Client KB5093447...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/05/11 8:10 a.m.15 views

NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

8.5CVSS5.8AI score0.01031EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:00 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2026-43292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vmalloc: prevent RCU stalls in kasanreleasevmallocnode When CONFIGPAGEOWNER is enabled, freeing KASAN shadow pages during vmalloc cleanup triggers expensive...

5.5CVSS6.1AI score0.00122EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/05/07 7:08 p.m.21 views

NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

8.5CVSS5.8AI score0.01031EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:00 a.m.22 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-016513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016513 advisory. In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescapefunction on 32-bit systems can cause an...

9.8CVSS6.6AI score0.02079EPSS
SaveExploits1References4
Rows per page
Query Builder