Lucene search
+L

12827 matches found

BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.136 views

The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.3CVSS6.7AI score0.00401EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.7 views

The vulnerability of the console-based graphic editor ImageMagick arises from a lack of mechanisms for encoding or shielding output data, allowing attackers to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS5.9AI score0.00884EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.142 views

The vulnerability of the ASHLAR encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS7.5AI score0.00384EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.139 views

The vulnerability of the decoder in the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.

The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the permitted range in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

4.8CVSS7.5AI score0.00258EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.5 views

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.8CVSS7.3AI score0.00113EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.146 views

The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

5.3CVSS7AI score0.00243EPSS
SaveExploits0References6Affected Software4
NVD
NVD
added 2026/07/15 5:16 p.m.10 views

CVE-2026-62378

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored...

9CVSS0.00332EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/15 4:50 p.m.31 views

CVE-2026-62378

RustFS Console is affected in versions 0.1.7–0.1.10. The vulnerability lies in the components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path, which can render HTML content uploaded as .pdf, enabling a stored XSS in the management console. This can l...

9CVSS6AI score0.00332EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/15 4:50 p.m.8 views

CVE-2026-62378 RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored...

9CVSS6AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/15 4:50 p.m.12 views

CVE-2026-62378

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored...

9CVSS6AI score0.00332EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/15 4:50 p.m.49 views

CVE-2026-62378 RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored...

9CVSS0.00332EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/15 4:50 p.m.12 views

EUVD-2026-44728

RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/object/pdf-viewer.tsx extension-based PDF preview path can render HTML content uploaded as .pdf, allowing stored...

9CVSS6AI score0.04217EPSS
SaveExploits1References3
NCSC
NCSC
added 2026/07/15 9:56 a.m.15 views

Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.

SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...

10CVSS6.4AI score0.76347EPSS
SaveExploits7References1
BDU FSTEC
BDU FSTEC
added 2026/07/15 12:0 a.m.155 views

The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.1CVSS5.5AI score0.00109EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.28 views

PT-2026-60228

Name of the Vulnerable Software and Affected Versions RustFS Console versions 0.1.7 through 0.1.9 Description The web management console allows stored cross-site scripting XSS because the PDF preview path in components/object/preview-modal.tsx and components/object/pdf-viewer.tsx can render HTML...

9CVSS4.8AI score0.00332EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2026/07/15 12:0 a.m.158 views

The vulnerability of the IPTC metadata writing module in the console-based image editing tool ImageMagick allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the IPTC writing module in the console-based image editing tool ImageMagick is related to the escape of operations from the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected...

5.1CVSS5.7AI score0.0012EPSS
SaveExploits0References9Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/07/15 12:0 a.m.10 views

SonicWall SMA 1000 Series <= 12.4.3-03434 / 12.5.x <= 12.5.0-02800 Multiple Vulnerabilities (SNWLID-2026-0008)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface. A remote, unauthenticated attacker could potentially cause the appliance to make requests to an...

10CVSS8.7AI score0.76347EPSS
SaveExploits7References3
NVD
NVD
added 2026/07/14 8:16 p.m.10 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2CVSS0.76347EPSS
SaveExploits2References2
CVE
CVE
added 2026/07/14 7:43 p.m.92 views

CVE-2026-15410

CVE-2026-15410 affects SonicWall SMA1000 Appliance Management Console (AMC). It is a post-authentication code-injection vulnerability that, under certain conditions, could allow a remote authenticated administrator to execute arbitrary OS commands. Root cause: improper control of generation of co...

7.2CVSS7.2AI score0.76347EPSS
SaveIn wildExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 7:43 p.m.9 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2AI score0.76347EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder