Lucene search
K

4067 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-6491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function imminposvec of the file libvips/deprecated/vips7compat....

5.3CVSS5.5AI score0.0016EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/16 2:2 a.m.23 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS0.00074EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/04/14 11:30 p.m.2 views

SUSE CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.3AI score0.00112EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.4 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.3 views

Windows OLE Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows OLE allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00298EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.4 views

PT-2026-32806

CVE-2026-32080 Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. https://t.co/ot43xvauta...

7CVSS6.2AI score0.00214EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/13 6:30 p.m.1 views

EUVD-2026-22030

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.4AI score0.00112EPSS
Exploits0References8
NVD
NVD
added 2026/04/13 5:16 p.m.5 views

CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS0.00112EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2026/04/13 5:16 p.m.3 views

CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.3AI score0.00112EPSS
Exploits0References6
OSV
OSV
added 2026/04/13 5:16 p.m.3 views

UBUNTU-CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.4AI score0.00112EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/04/13 4:45 p.m.3 views

CVE-2026-6192 uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.3AI score0.00112EPSS
Exploits0References7
CVE
CVE
added 2026/04/13 4:45 p.m.92 views

CVE-2026-6192

Affected software: uclouvain openjpeg (up to 2.5.4). Vulnerable component: opj_pi_initialise_encode in src/lib/openjp2/pi.c due to an integer overflow. Impact: local attacker can exploit; exploit exists publicly. Patch: reference to patch identifier 839936aa33eb8899bbbd80fda02796bb65068951 should...

4.8CVSS5.4AI score0.00112EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.8 views

PT-2026-32530

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child process.exec of the file src/compressor.js of the component Compressor Feature. This manipulation causes command injection. The attack can only be executed locally. The exploit has been publicl...

5.3CVSS5.4AI score0.00683EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-6192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The...

4.8CVSS5.3AI score0.00112EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-14569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. T...

5.3CVSS5.6AI score0.00117EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.23 views

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2026-1584)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1584 advisory. When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore ma...

9.2CVSS6.5AI score0.01162EPSS
Exploits3References28
Positive Technologies
Positive Technologies
added 2026/04/12 12:0 a.m.3 views

PT-2026-32162

R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payload with a 292-byte offset and JMP ESP instruction to execute commands like calc.exe when the...

8.6CVSS6.5AI score0.00189EPSS
Exploits0References4
OSV
OSV
added 2026/04/11 2:3 p.m.4 views

OESA-2026-1860 mxml security update

Mini-XML is a small XML parsing library that you can use to read XML and XML-like data files in your application without requiring large non-standard libraries. Security Fixes: A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c o...

4.8CVSS6.1AI score0.00128EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/10 9:31 a.m.3 views

EUVD-2026-21354

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix...

4.8CVSS5.4AI score0.00227EPSS
Exploits1References6
AlpineLinux
AlpineLinux
added 2026/04/10 9:0 a.m.2 views

CVE-2026-6042

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix...

4.8CVSS5.4AI score0.00227EPSS
Exploits1
Rows per page
Query Builder