Lucene search
K

24 matches found

OSV
OSV
added 6 hours ago4 views

ROOT-OS-DEBIAN-13-CVE-2025-40311 CVE-2025-40311 in rootio-linux - Patched by Root

Root has patched CVE-2025-40311 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

5.7AI score0.00028EPSS
Exploits0
OSV
OSV
added yesterday1 views

ROOT-OS-DEBIAN-11-CVE-2025-40311 CVE-2025-40311 in rootio-linux - Patched by Root

Root has patched CVE-2025-40311 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

5.7AI score0.00028EPSS
Exploits0
OSV
OSV
added 3 days ago3 views

ROOT-OS-UBUNTU-2404-CVE-2025-40311 CVE-2025-40311 in rootio-linux - Patched by Root

Root has patched CVE-2025-40311 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.4AI score0.00028EPSS
Exploits0
OSV
OSV
added 2026/04/29 7:9 a.m.1 views

ROOT-OS-DEBIAN-12-CVE-2026-40311 CVE-2026-40311 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-40311 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

5.5CVSS5.2AI score0.00006EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.4 views

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2026:1596-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1596-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncati...

7.5CVSS5.6AI score0.0002EPSS
Exploits0References19
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.0 views

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:1598-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1598-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denia...

7.5CVSS5.9AI score0.0002EPSS
Exploits0References37
OPENSUSE Linux
OPENSUSE Linux
added 2026/04/23 12:0 a.m.2 views

Security update for ImageMagick (important)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20606-1 Rating: important References: bsc1259612 bsc1259872 bsc1260874 bsc1260879 bsc1262097 bsc1262145 bsc1262146 bsc1262147 bsc1262148...

8.7CVSS6.2AI score0.00005EPSS
Exploits0References16
SUSE CVE
SUSE CVE
added 2026/04/15 11:25 p.m.2 views

SUSE CVE-2026-40311

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...

5.5CVSS5.7AI score0.00006EPSS
Exploits0References7
Circl
Circl
added 2026/04/14 1:52 a.m.1 views

CVE-2026-40311

creationtimestamp| type| source ---|---|--- 2026-04-14 01:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgbgxmhj42m 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

5.5CVSS5.7AI score0.00006EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-40311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-fr...

5.5CVSS5.8AI score0.00006EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/13 9:36 p.m.1 views

CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...

5.5CVSS5.7AI score0.00006EPSS
Exploits0References4
Circl
Circl
added 2026/03/19 12:0 a.m.3 views

CVE-2025-40311

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

5.8AI score0.00028EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2025/12/08 12:0 a.m.2 views

CVE-2025-40311

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

5.7AI score0.00028EPSS
Exploits0References21
EUVD
EUVD
added 2025/11/10 4:5 a.m.1 views

EUVD-2025-40311

Malicious code in budi-tapai70-breki npm...

6.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:43 a.m.4 views

CVE-2023-40311

Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1....

6.7CVSS5.9AI score0.00148EPSS
Exploits0
Circl
Circl
added 2023/08/14 10:19 p.m.1 views

CVE-2023-40311

creationtimestamp| type| source ---|---|--- 2023-08-14 22:19:45+00:00| seen| https://t.me/cibsecurity/68470...

6.7CVSS4.9AI score0.00148EPSS
Exploits0References1
OSV
OSV
added 2023/08/14 6:15 p.m.10 views

CVE-2023-40311

Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1....

4.8CVSS6AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/08/14 5:31 p.m.11 views

CVE-2023-40311 Stored XSS in multiple JSP files in opennms/opennms

Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1....

6.7CVSS5.9AI score0.00148EPSS
Exploits0References3
CVE
CVE
added 2023/08/14 5:31 p.m.37 views

CVE-2023-40311

CVE-2023-40311 affects OpenNMS Horizon/OpenMNS: multiple stored XSS via unsanitized parameters in JSP files on Horizon 31.0.8 and versions prior to 32.0.2. Attackers could store data in the database and render via JSPs/Angular templates. Mitigation: upgrade to Horizon 32.0.2+ or Meridian equivale...

6.7CVSS5.6AI score0.00148EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2023/08/14 5:31 p.m.11 views

CVE-2023-40311 Stored XSS in multiple JSP files in opennms/opennms

Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1....

6.7CVSS6.4AI score0.00148EPSS
Exploits0References3
Rows per page
Query Builder