CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

EUVD-2026-97702

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

CVE-2026-109258

The ImageMagick software versions 7.1.0-20 before 7.1.2-32 are susceptible to an invalid memory free vulnerability within the fx operation . This issue is triggered when the initialization of an FX runtime entry fails, allowing an attacker to cause an invalid free . The primary consequences inclu...

CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-65432, CVE-2026-66142, CVE-2026-66143, CVE-2026-66144, CVE-2026-49875, CVE-2026-10841, CVE-2026-11548, CVE-2026-11549, CVE-2026-11722, CVE-2026-15396, CVE-2026-15412, CVE-2026-15634 in WebSphere Application Server WAS Liberty as...

Security Bulletin: IBM Application Modernization Accelerator is affected by vulnerability found in JavaScript

Summary There is a vulnerability in the JavaScript used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2026-17495 DESCRIPTION: moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a...

CVE-2026-21136

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

EUVD-2026-97200

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

CVE-2026-21136

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

CVE-2026-21136

An improper authorization vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to invoke the application restore process. No specific exploit details or in-the-wild exploitation links are provided in the documents. Remediation information is not speci...

poastal

Poastal - la herramienta OSINT de correo electrónico Poastal es una herramienta OSINT de correo electrónico que proporciona información valiosa sobre cualquier dirección de correo electrónico. Con Poastal, puedes ingresar fácilmente una dirección de correo electrónico y responderá rápidamente a...

CVE-2026-109271: Double Free

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused...

CVE-2026-109258: NULL Pointer Dereference

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

CVE-2026-19627: Improper Limitation of a Pathname to a Restricted Directory

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths...

CVE-2026-93891: Improper Restriction of XML External Entity Reference

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...

CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

CVE-2026-102627: Improper Limitation of a Pathname to a Restricted Directory

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

CVE-2026-92876: Uncontrolled Recursion

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-105052: Improper Limitation of a Pathname to a Restricted Directory

IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-18537: Improper Control of Generation of Code

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...