Lucene search
+L

6508 matches found

CVE
CVE
•added 2026/09/18 5:47 p.m.•40 views

CVE-2026-81180

SysReptor Professional (a pentest reporting platform) is vulnerable to authenticated remote code execution prior to version 2026.61 . Authenticated users can upload image files in formats that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared tempora...

8.8CVSS5.9AI score0.00663EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/18 5:47 p.m.•52 views

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

8.8CVSS0.00663EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/09/18 5:47 p.m.•17 views

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

8.8CVSS5.9AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•12 views

PT-2026-95580

Name of the Vulnerable Software and Affected Versions SysReptor Professional versions prior to 2026.61 Description Authenticated users can upload image files that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared temporary directory. By combining thi...

8.8CVSS5.8AI score0.00663EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•14 views

CVE-2026-81180: Improper Input Validation

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

8.8CVSS5.9AI score0.00663EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/16 12:14 a.m.•11 views

SUSE CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

7.8CVSS7.4AI score0.00784EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/09/16 12:00 a.m.•15 views

UBUNTU-CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/16 12:00 a.m.•24 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.3AI score0.00784EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-39919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to caus...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 3:17 p.m.•41 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS0.00784EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/09/15 3:17 p.m.•11 views

DEBIAN-CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.3CVSS7.4AI score0.00784EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/15 2:26 p.m.•22 views

EUVD-2026-78584

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/15 2:26 p.m.•22 views

CVE-2026-39919 Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/15 2:26 p.m.•70 views

CVE-2026-39919 Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS0.00784EPSS
SaveExploits0References4
Mend
Mend
•added 2026/09/15 2:26 p.m.•10 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/15 2:26 p.m.•24 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/09/15 2:26 p.m.•68 views

CVE-2026-39919 Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.3CVSS6.5AI score
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2026/09/15 2:26 p.m.•6 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0
CVE
CVE
•added 2026/09/15 2:26 p.m.•151 views

CVE-2026-39919

Ghostscript before 10.08.0 is affected by a heap-based buffer overflow in the JPEG 2000 output adapter (base/sjpx_openjpeg.c). The root cause is a sizing mismatch: when image components declare different subsampling factors, the non-samescale sub-byte-depth path allocates a row buffer sized for p...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•8 views

CVE-2026-39919: Heap-based Buffer Overflow

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS7.4AI score0.00784EPSS
SaveExploits0References2
Rows per page
Query Builder