CVE-2026-21500 Stack Overflow in iccDEV XML Calculator Macro Expansion

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2...

EUVD-2026-1406

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2...

CVE-2026-21500 Stack Overflow in iccDEV XML Calculator Macro Expansion

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the XML calculator macro expansion. This issue has been patched in version 2.3.1.2...

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

EUVD-2026-1408

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

CVE-2026-21498 NULL Pointer Dereference in iccDEV XML Calculator Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the XML calculator parser. This issue has been patched in version 2.3.1.2...

PT-2026-2067

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A stack overflow issue exists in the calculator parser component in versio...

iccDEV 输入验证错误漏洞

iccDEV is a color configuration codebase open-sourced by the International Color Consortium ICC. An input validation error vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a stack overflow in the calculator parser...

PT-2026-2066

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A stack overflow issue exists in the XML calculator macro expansion...

PT-2026-2064

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with ICC color management profiles. A NULL pointer dereference issue exists in the XML calculator parser in versions prior to 2.3.1.2...

iccDEV 安全漏洞

iccDEV is an open source color configuration code base from the International Color Consortium ICC. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from the presence of a null pointer dereference in the XML calculator parser...

WordPress Fintelligence Calculator plugin <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Fintelligence Calculator versions = 1.0.3...

WordPress Cost Calculator Builder plugin <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions vulnerability

Authenticated Subscriber+ Missing Authorization via getccorders/updateorderstatus Functions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Cost Calculator Builder versions = 3.5.32...

WordPress Zigaform plugin <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Zigaform – Price Calculator & Cost Estimation Form Builder Lite versions = 7.4.7...

WordPress Estatik Mortgage Calculator plugin <= 2.0.11 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Mortgage Calculator Estatik versions = 2.0.11...

Malicious code in node-calculator-x7k9-grabber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6cc05819aa6a1000e0cdbf0a16de8aedc5d4c8be6ddf58c1a4db00890ea075b The package node-calculator-x7k9-grabber was found to contain malicious code...

Malicious code in node-calculator-x7k9-evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5725b959d72dc6ed33866064dda06f32d3c37b6f86310eba08d256c7ef9dc8 The package node-calculator-x7k9-evil was found to contain malicious code...

MAL-2025-192846 Malicious code in node-calculator-x7k9-evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5725b959d72dc6ed33866064dda06f32d3c37b6f86310eba08d256c7ef9dc8 The package node-calculator-x7k9-evil was found to contain malicious code...

MAL-2025-192847 Malicious code in node-calculator-x7k9-grabber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6cc05819aa6a1000e0cdbf0a16de8aedc5d4c8be6ddf58c1a4db00890ea075b The package node-calculator-x7k9-grabber was found to contain malicious code...