Lucene search
+L

28643 matches found

osv_oesa
osv_oesa
•added 2026/07/24 11:12 a.m.•23 views

OESA-2026-3137 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

8.2CVSS7.1AI score0.00445EPSS
SaveExploits7References8
osv_oesa
osv_oesa
•added 2026/07/24 11:12 a.m.•17 views

OESA-2026-3140 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

7.5CVSS7AI score0.00421EPSS
SaveExploits6References7
osv_oesa
osv_oesa
•added 2026/07/24 11:12 a.m.•20 views

OESA-2026-3141 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

7.5CVSS7.2AI score0.00421EPSS
SaveExploits6References7
osv_oesa
osv_oesa
•added 2026/07/24 11:12 a.m.•18 views

OESA-2026-3138 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

8.2CVSS7.1AI score0.00445EPSS
SaveExploits7References8
RedHat Linux
RedHat Linux
•added 2026/07/24 10:23 a.m.•26 views

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

7.8CVSS7AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/07/24 10:10 a.m.•48 views

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

7.8CVSS7AI score0.0014EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/07/24 9:16 a.m.•13 views

DEBIAN-CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

6.1CVSS6.2AI score0.00186EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/07/24 9:16 a.m.•19 views

UBUNTU-CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

1.8CVSS6.2AI score0.00186EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/24 7:44 a.m.•24 views

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

4.6CVSS6.2AI score0.00186EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/24 7:44 a.m.•25 views

EUVD-2026-48525

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

1.8CVSS6.2AI score0.00186EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/07/24 7:44 a.m.•17 views

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

6.1CVSS6.2AI score0.00186EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•33 views

PT-2026-64336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ti-qspi SPI driver. The driver is designed to fall back to PIO Programmed Input/Output mode if DMA Direct Memory Access setup fails during the probe...

7.8CVSS5.9AI score0.00126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•27 views

PT-2026-64335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fwnode init function where the secondary pointer of a firmware node is not properly initialized. When a firmware node is allocated on the stack or on the heap usin...

5.5CVSS5.4AI score0.00123EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•26 views

PT-2026-64260

Name of the Vulnerable Software and Affected Versions GNU coreutils affected versions not specified Description The unexpand utility is susceptible to a heap-based buffer overflow caused by an integer overflow during buffer allocation. This occurs when the software processes large values provided...

6.1CVSS6.2AI score0.00186EPSS
SaveExploits0References42
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•63 views

PT-2026-64349

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference exists in the dma handle rx function. This occurs because the system fails to check for the failure of the dma alloc coherent function, which is used...

5.5CVSS5.2AI score0.00115EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•28 views

PT-2026-64330

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur in the drm/msm/a6xx component when the kzalloc function fails to allocate memory. This happens because the return value of kzalloc is not properly...

5.5CVSS5.5AI score0.00143EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/23 5:14 p.m.•18 views

SUSE CVE-2026-65315

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

8.7CVSS6AI score0.00807EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/23 2:18 p.m.•18 views

CVE-2026-8287

Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...

4.3CVSS0.00359EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 1:48 p.m.•22 views

EUVD-2026-48284

Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...

4.3CVSS5.2AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/23 1:48 p.m.•54 views

CVE-2026-8287 Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software

Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...

4.3CVSS0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder