45267 matches found
JLSEC-2026-993
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when Magick parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been fixed in versions 6.9.13-44 and 7.1.2-1...
JLSEC-2026-882
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...
JLSEC-2026-877
A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability...
JLSEC-2026-880
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...
CVE-2026-10842
CVE-2026-10842 – Affects IBM WebSphere Application Server (Traditional) 8.5, 9.0 and WebSphere Application Server Liberty 17.0.0.3–26.0.0.7. The vulnerability is a remote attacker bypass of security constraints (authentication bypass, CWE-289). Reported base CVSS v3.1 score is 7.5 (NONE user inte...
CVE-2026-14522
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters...
JLSEC-2026-814
In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the height field of the ImageSize data structure is equal to zero...
Server-side Request Forgery (SSRF)
Overview linuxfabrik-lib is a Python libraries used in various Linuxfabrik projects, including the 'Linuxfabrik Monitoring Plugins' project. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch function when credential headers are forwarded across a...
WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.9.0 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by Nox Axter in WordPress Plugin Admin and Site Enhancements ASE Pro versions = 8.9.0...
SUSE-SU-2026:3423-1 Security update for xen
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...
org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers
A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...
CLEANSTART-2026-MI75694 Security fixes in k8ssandra-client-fips 0.7.0-r5
Package k8ssandra-client-fips version 0.7.0-r5 fixes 11 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...
CLEANSTART-2026-MU34721 Security fixes in minio-operator 6.0.4-r2
Package minio-operator version 6.0.4-r2 fixes 4 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-29wx-vh33-7x7r, CVE-2025-30204, CVE-2024-51744...
CLEANSTART-2026-YC42491 Security fixes in external-secrets 2.2.0-r0
Package external-secrets version 2.2.0-r0 fixes 29 vulnerabilities: CVE-2026-39820, CVE-2020-8912, CVE-2020-8911, ghsa-pjcq-xvwq-hhpj, ghsa-78h2-9frx-2jm8...
CLEANSTART-2026-RX52508 Security fixes in consul 2.0.0-r0
Package consul version 2.0.0-r0 fixes 21 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CLEANSTART-2026-DE38896 Security fixes in argo-workflows 4.0.0-r0
Package argo-workflows version 4.0.0-r0 fixes 1 vulnerabilities: CVE-2026-24051...
CLEANSTART-2026-OV94117 Security fixes in rundeck 6.0.0-r0
Package rundeck version 6.0.0-r0 fixes 52 vulnerabilities: CVE-2026-42505, CVE-2026-39822, CVE-2025-67030, CVE-2026-55153, CVE-2026-34986...
CLEANSTART-2026-KH99344 Security fixes in jitsucom-jitsu 2.11.0-r0
Package jitsucom-jitsu version 2.11.0-r0 fixes 9 vulnerabilities: ghsa-mwv6-3258-q52c, ghsa-w37m-7fhw-fmv9, CVE-2025-30218, CVE-2025-49005, CVE-2025-65945...
CLEANSTART-2026-ZY67243 Security fixes in incubator-kie-kogito-data-index-ephemeral 10.1.0-r1
Package incubator-kie-kogito-data-index-ephemeral version 10.1.0-r1 fixes 43 vulnerabilities: CVE-2025-11965, CVE-2025-11966, CVE-2025-2240, CVE-2025-48924, CVE-2025-49574...