Lucene search
+L

22301 matches found

CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•23 views

WordPress plugin ShareThis Dashboard for Google Analytics has a vulnerability related to information leakage.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information...

4.7CVSS5.6AI score0.00281EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/06 7:16 p.m.•24 views

CVE-2026-21491

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

7.1CVSS0.00221EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/01/06 7:07 p.m.•58 views

CVE-2026-21491 iccDEV has unicode buffer overflow in CIccTagTextDescription

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. A vulnerability present in versions prior to 2.3.1.2 affects users of the iccDEV library who process ICC color profiles. It...

6.1CVSS0.00221EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/06 7:07 p.m.•54 views

CVE-2026-21491

CVE-2026-21491 affects iccDEV libraries prior to version 2.3.1.2. The vulnerability is a Unicode buffer overflow in CIccTagTextDescription when processing ICC color profiles. Version 2.3.1.2 contains a patch; no workarounds are noted in the provided documents. Remediate by upgrading to 2.3.1.2 or...

7.1CVSS6.1AI score0.00221EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2026/01/06 2:15 p.m.•34 views

CVE-2026-21488

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in version 2.3.1.2...

7.1CVSS0.0015EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/06 1:52 p.m.•47 views

EUVD-2026-1157

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in version 2.3.1.2...

6.1CVSS5.9AI score0.0015EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/06 2:15 a.m.•24 views

CVE-2026-21673

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

7.8CVSS0.00198EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/06 1:32 a.m.•14 views

CVE-2026-21673 iccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

7.8CVSS5.9AI score0.00198EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/06 1:32 a.m.•24 views

EUVD-2026-1148

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum. This vulnerability affects users of the iccDEV library who process ICC color profiles. This issue is fixed in...

7.8CVSS5.9AI score0.00198EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•22 views

Phoenix Contact iDS6 DSSPro security vulnerability

Phoenix Contact iDS6 DSSPro is a digital signage management system from iDS6 USA. A security vulnerability exists in Phoenix Contact iDS6 DSSPro version 6.2, which stems from the presence of a sensitive information disclosure vulnerability that could lead to the interception of passwords...

8.6CVSS5.8AI score0.00307EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•53 views

PT-2026-1432

Name of the Vulnerable Software and Affected Versions iccDEV versions 2.3.1.1 and below Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are susceptible to an Out-of-bounds Read, Heap-based Buffer Overflow, and Improper...

6.1CVSS5.8AI score0.0015EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/01/05 6:10 p.m.•23 views

Template Injection

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Template Injection via the map filter in Twig templates when processing text fields that accept Twig input in the control panel settings or through the System Messages utility. An attacker ca...

8.8CVSS6.5AI score0.00943EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•16 views

Amazon Linux 2 : qt5-qtbase, --advisory ALAS2-2025-3102 (ALAS-2025-3102)

The version of qt5-qtbase installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3102 advisory. Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Q...

8.7CVSS5.5AI score0.00315EPSS
SaveExploits0References4
Amazon
Amazon
•added 2026/01/05 12:00 a.m.•49 views

Important: qt5-qtdeclarative

Issue Overview: Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64 bit, 32 bit allows Excessive Allocation. This issue affects users of the Text component ...

8.7CVSS5.6AI score0.00315EPSS
SaveExploits0
EUVD
EUVD
•added 2026/01/02 6:30 p.m.•13 views

EUVD-2026-0532

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/02 5:55 a.m.•283 views

Exploit for Code Injection in Apache Commons_Text

CVE-2022-42889-text4shell Description This script is a pe...

9.8CVSS8AI score0.99931EPSS
SaveExploits44
CNNVD
CNNVD
•added 2026/01/02 12:00 a.m.•21 views

Vatilon IP Camera security vulnerabilities

Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which originates from transmitting user credentials in clear text...

7.5CVSS5.8AI score0.0029EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•12 views

PT-2026-27395

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A use-after-free issue exists in the Layout: Text and Font...

10CVSS7.7AI score0.00967EPSS
SaveExploits0References262
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-27417

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description The issue involves incorrect boundary conditions within the Graphics: Text component. This coul...

10CVSS7.4AI score0.00967EPSS
SaveExploits1References260
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•17 views

PT-2026-27398

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description The issue involves incorrect boundary conditions within th...

10CVSS7.3AI score0.00714EPSS
SaveExploits0References261
Rows per page
Query Builder