491536 matches found
gimp: gimp: Heap buffer overflow in read_channel_data()
A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service DoS by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the...
gimp: GIMP: Remote code execution via TIF file parsing vulnerability
A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...
gimp: GIMP: Remote code execution via PSD file parsing integer overflow
A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...
CVE-2025-13647 Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths
The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header. Successful exploitation can lead to the unintended exposure of the file...
CVE-2025-13647
Multiple WSO2 products are vulnerable to an information disclosure vulnerability due to insufficient validation of the content-type header during request processing. An attacker can submit a crafted request with a manipulated header to expose the file paths for certificate files . This disclosure...
CVE-2025-13647 Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths
The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header. Successful exploitation can lead to the unintended exposure of the file...
EUVD-2025-211234
The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header. Successful exploitation can lead to the unintended exposure of the file...
CVE-2026-57202
A flaw was found in Asterisk. An authenticated remote attacker with read-only permissions to the Asterisk REST Interface ARI can bypass access controls by invoking the setChannelVar function. This vulnerability allows the attacker to execute restricted write operations, such as modifying arbitrar...
CVE-2026-57197
A flaw was found in Asterisk. A heap buffer overflow in the formatoggspeex module allows an attacker to cause a Denial of Service DoS or potentially achieve arbitrary code execution. This issue occurs when Asterisk reads a corrupted Speex audio file, triggering an unbounded memory copy operation...
CVE-2026-119210
A flaw was found in MariaDB Connector/J. This vulnerability can lead to information disclosure when client-side local file handling is enabled. A compromised database server or a machine-in-the-middle attacker can provide crafted database or table identifiers that bypass filename validation check...
CVE-2026-101180
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-101179
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-101170
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest release INA-1.0.2.7 Vulnerability Details CVEID:CVE-2025-12748 DESCRIPTION: A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was...
CVE-2026-101180
A DoS vulnerability exists in the file parsing module , as identified by CVE-2026-101180 . The underlying cause is attributed to CWE-674 (Uncontrolled Recursion) . Successful exploitation may impact the availability of the affected system. While the CVSS v3.1 metric indicates a NETWORK attack vec...
CVE-2026-101180
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-101180
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-115077
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-101179
A buffer overflow vulnerability exists in the file preview module . Successful exploitation of this vulnerability may impact the availability of the affected system. The vulnerability is associated with CWE-19 (Data Processing Errors). While the CVSS 3.1 score is 4.7 (Medium) , it requires user i...