492 matches found
CVE-2026-53462 ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when an allocation fails in CheckPrimitiveExtent this can result in a heap-use-after-free and result in a crash. This issue has been patched in versions 6.9.13-...
CVE-2026-53461
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash. This issue has been patched in versions 6.9.13-50 and...
CVE-2026-53460 ImageMagick: Policy Bypass can trigger out-of-Memory condition
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 a...
CVE-2026-46374
creationtimestamp| type| source ---|---|--- 2026-06-10 07:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5atubit2n...
PT-2026-48569
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-50 ImageMagick versions prior to 7.1.2-25 Description A missing check for maximum memory request in the AcquireAlignedMemory function can trigger an out-of-memory condition, leading to a denial of service...
PT-2026-48571
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-50 ImageMagick versions prior to 7.1.2-25 Description A heap-use-after-free occurs when an allocation fails in the CheckPrimitiveExtent function, which can lead to a system crash. Heap-use-after-free is a...
PT-2026-48572
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-50 ImageMagick versions prior to 7.1.2-25 Description A null pointer dereference occurs when incorrect arguments are passed during the distort operation. A null pointer dereference is a situation where a...
OPENSUSE-SU-2026:10964-1 libsofia-sip-ua-glib3-1.13.17+50-1.1 on GA media
These are all security issues fixed in the libsofia-sip-ua-glib3-1.13.17+50-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-42539
creationtimestamp| type| source ---|---|--- 2026-05-19 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7rh74g2w2u 2026-06-04 23:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirkk6m7z2f...
Mozilla Thunderbird < 151.0
The version of Thunderbird installed on the remote Windows host is prior to 151.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-50 advisory. - Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory...
GHSA-C55G-RP4X-FX84
creationtimestamp| type| source ---|---|--- 2026-05-18 16:40:50+00:00| seen| https://gist.github.com/alon710/f7ea0e610f42bb6c81fff1ec9bb3b2bd...
CVE-2025-61971
creationtimestamp| type| source ---|---|--- 2026-05-13 05:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlpl672ijz2q...
CVE-2026-8052
creationtimestamp| type| source ---|---|--- 2026-05-12 23:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mloy5xmzq32c...
CVE-2026-43572
creationtimestamp| type| source ---|---|--- 2026-05-05 13:27:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4c3rxdte2k...
CVE-2026-40685
creationtimestamp| type| source ---|---|--- 2026-04-30 13:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkpqz242uz27 2026-05-02 04:40:22+00:00| seen| https://vulnerability.circl.lu/bundle/1f150b5f-d6d1-40b6-94cc-7bd855a097ec 2026-05-25 20:02:12+00:00| seen|...
CVE-2026-42602
creationtimestamp| type| source ---|---|--- 2026-04-29 14:41:10+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-pjv4-3c63-699f 2026-05-14 14:50:16+00:00| seen|...
CVE-2026-7274
creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...
CVE-2026-6631
creationtimestamp| type| source ---|---|--- 2026-04-20 11:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwfohlxv22e 2026-04-20 13:16:52+00:00| published-proof-of-concept| Telegram/7GNSW27Y2N6zMsJzLht94-sDuqQRdO09nNnVciVhTSt0Y 2026-04-20 13:23:13+00:00| seen|...
CVE-2026-39371 RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests
RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be invoked via GET requests, bypassing their intended HTTP method. In cookie-authenticated applications, this allowed cross-site GET navigations to trigger...