5266 matches found
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4651 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.1.0.beta1, <=4.1.135.final)
io.netty:netty-codec-stomp MAVEN version =4.1.0.beta1, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4651 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.1.0.beta1, <=4.1.135.final)
io.netty:netty-codec-stomp MAVEN version =4.1.0.beta1, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...
ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +918 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.2.0.alpha1, <=4.2.15.final)
io.netty:netty-codec-stomp MAVEN version =4.2.0.alpha1, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-stomp and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...
ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +918 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.2.0.alpha1, <=4.2.15.final)
io.netty:netty-codec-stomp MAVEN version =4.2.0.alpha1, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-stomp and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4651 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.1.0.beta1, <=4.1.135.final)
io.netty:netty-codec-stomp MAVEN version =4.1.0.beta1, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =0.0.1, =5.1.0, =2.0.21, =2.0.28 and more Source cve...
ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +918 more potentially affected by CVE-2026-44891 via io.netty:netty-codec-stomp (>=4.2.0.alpha1, <=4.2.15.final)
io.netty:netty-codec-stomp MAVEN version =4.2.0.alpha1, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-stomp and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...
CVE-2026-54058
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes, getpixel,...
CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability
...
CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability
...
CVE-2026-57083
CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...
CVE-2026-54058
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes, getpixel,...
CVE-2026-54058
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes, getpixel,...
Windows Media Photo Codec Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally...
ROS-20260714-73-0054
The vulnerability of the codecsbcdecode function in the SBC analyzer of Wireshark, a computer network analysis tool, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...
ROS-20260714-73-0028
The vulnerability of the AMR-NB codec in the Wireshark computer network traffic analyzer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260714-73-0014
The vulnerability of the iLBC audio codec used by Wireshark, a network traffic analyzer, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...
CVE-2026-54058: Out-of-bounds Read
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes, getpixel,...
ROS-20260714-73-0004
The vulnerability of the iLBC packet analyzer in Wireshark relates to a memory reclamation error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Oracle Linux 8 : freerdp (ELSA-2026-38501)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38501 advisory. 2:2.11.7-10 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186983 Tenable has extracted the preceding description block directly...