Lucene search
+L

23325 matches found

EUVD
EUVD
•added 2026/01/07 10:05 p.m.•15 views

EUVD-2026-1382

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

8.8CVSS5.9AI score0.00381EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/07 9:32 p.m.•18 views

CVE-2026-21687 iccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagCurve::CIccTagCurve. This vulnerability affects users of the iccD...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2026/01/07 9:31 p.m.•19 views

GHSA-QJM3-CVP9-3JJ3 Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

6.8CVSS6AI score0.00512EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/01/07 9:31 p.m.•21 views

Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

7.8CVSS6AI score0.00512EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/01/07 9:18 p.m.•41 views

CVE-2026-21684 iccDEV has Undefined Behavior in CIccTagSpectralViewingConditions()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagSpectralViewingConditions. This vulnerability affects users of th...

7.1CVSS0.0029EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/01/07 9:16 p.m.•18 views

CVE-2026-22187

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

7.8CVSS6AI score0.00512EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/07 6:15 p.m.•20 views

CVE-2026-21680

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV libra...

7.5CVSS0.00316EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/01/07 5:50 p.m.•20 views

CVE-2026-21680 iccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer dereference vulnerability. This vulnerability affects users of the iccDEV libra...

6.5CVSS6.5AI score
SaveExploits0References5
NVD
NVD
•added 2026/01/07 5:16 p.m.•31 views

CVE-2025-65805

OpenAirInterface CN5G AMF=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by accessing port N1 and sending an imsi string longer than 1000 to AMF...

7.5CVSS0.00378EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/07 4:23 p.m.•92 views

CVE-2026-20029

Cisco ISE and ISE-PIC are affected by an XML External Entity (XXE) processing vulnerability in the licensing feature. An authenticated attacker with administrative privileges can upload a malicious file via the web-based management interface and read arbitrary files from the underlying OS (potent...

4.9CVSS6.2AI score0.06212EPSS
SaveIn wildExploits0References1
RedHat Linux
RedHat Linux
•added 2026/01/07 11:23 a.m.•20 views

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

7.1CVSS6.7AI score0.00417EPSS
SaveExploits4References8
RedhatCVE
RedhatCVE
•added 2026/01/07 9:37 a.m.•24 views

CVE-2019-7107

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...

10CVSS7.5AI score0.28944EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:11 a.m.•36 views

CVE-2025-1268

Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2...

9.4CVSS7.5AI score0.00806EPSS
SaveExploits0References1
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•11 views

CVE-2025-9905 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

7.3CVSS7.4AI score0.00223EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/01/07 1:30 a.m.•11 views

GHSA-C9RC-MG46-23W3 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/01/07 1:07 a.m.•22 views

kernel: RDMA/siw: Fix connection failure handling

A NULL dereference vulnerability was found in the Linux kernel, which is caused when the siwcmworkhandler function attempts to dereference a NULL listener that may be created when immediate MPA request processing fails and the newly created endpoint unlinks the listening endpoint ready to be...

7.5CVSS6.1AI score0.00661EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•15 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs while processing sensor utility operations...

6.7CVSS6.8AI score0.00062EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•26 views

PT-2026-2078

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 exhibit an Undefined Behavior runtime error when...

7.1CVSS5.7AI score0.0021EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/07 12:00 a.m.•30 views

CVE-2025-66786

A logical error in the OpenAirInterface CN5G AMF (version v2.0.1 and earlier ) allows unauthorized remote attackers to launch a denial-of-service (DoS) attack. The vulnerability is triggered by sending malicious JSON format requests to the AMF's SBI interface , where improper input validation occ...

7.5CVSS5.9AI score0.00372EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/07 12:00 a.m.•44 views

CVE-2025-65805

OpenAirInterface CN5G AMF=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by accessing port N1 and sending an imsi string longer than 1000 to AMF...

0.00378EPSS
SaveExploits0References1
Rows per page
Query Builder