Lucene search
+L

6031 matches found

OSV
OSV
•added 2026/07/14 5:47 p.m.•17 views

MAL-2026-10606 Malicious code in base58-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5517883cb10a7c76e95fdf21a4ffce21c13fe1ca42fafc13f5adb021599772 The package's index.js contains multiple Buffer.from... decode sites lines 7, 29, 34, 49, 50 used to reconstruct strings/payloads at runtime — the...

6.1AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/07/14 5:46 p.m.•41 views

CVE-2026-45077

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener Symfony\Bridge\Monolog\Command\ServerLogCommand binds to 0.0.0.0:9911 by default and processes each received frame with...

8.6CVSS5.3AI score0.00666EPSS
SaveExploits0
OSV
OSV
•added 2026/07/14 5:17 p.m.•11 views

AZL-92436 CVE-2026-59886 affecting package python-pyasn1 for versions less than 0.4.8-3

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float...

7.5CVSS7.2AI score0.00616EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/14 5:17 p.m.•11 views

DEBIAN-CVE-2026-59886

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float...

7.5CVSS6.1AI score0.00616EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/14 5:17 p.m.•20 views

PYSEC-2026-3457

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float...

7.5CVSS5.3AI score0.00616EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/14 5:17 p.m.•33 views

AZL-92430 CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/07/14 4:41 p.m.•19 views

CVE-2026-59884

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...

7.5CVSS5.3AI score0.00616EPSS
SaveExploits0
NVD
NVD
•added 2026/07/14 4:17 p.m.•34 views

CVE-2026-59204

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS0.00655EPSS
SaveExploits1References4
OSV
OSV
•added 2026/07/14 4:17 p.m.•17 views

UBUNTU-CVE-2026-59204

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS6.1AI score0.00655EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/07/14 4:17 p.m.•26 views

CVE-2026-59204

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS6.1AI score0.00655EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/07/14 3:38 p.m.•53 views

CVE-2026-59204 Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS0.00655EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/07/14 3:38 p.m.•9 views

CVE-2026-59204 Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and...

8.7CVSS5.2AI score0.00655EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/07/14 8:13 a.m.•12 views

CVE-2026-59083 Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

6.1AI score0.0037EPSS
SaveExploits1References1
CVE
CVE
•added 2026/07/14 8:13 a.m.•382 views

CVE-2026-59083

A vulnerability in the rewrite valve component of Apache Tomcat allows for a security constraint bypass due to improper handling of URL encoding (Hex Encoding) . This issue affects multiple versions, including 11.0.0-M1 through 11.0.23, 10.1.0-M1 through 10.1.56, 9.0.0.M1 through 9.0.119, and 8.5...

9.1CVSS6.1AI score0.0037EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/07/14 8:13 a.m.•22 views

CVE-2026-59083 Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

9.1CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/14 8:13 a.m.•56 views

CVE-2026-59083 Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

0.0037EPSS
SaveExploits1References1
OSV
OSV
•added 2026/07/14 3:37 a.m.•35 views

MAL-2026-10540 Malicious code in postcss-processor-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0253c4f750443ba47f0ab61347fa85a1659b847190a85757575e904966636da On require, src/index.js loads src/token-loader.js, which reads data/design-tokens.json, XOR-decodes the base64 blobs under encrypted.chunks using a...

6.1AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 2:40 a.m.•37 views

Malicious code in @tqm-mfe/main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba70610a96625984d6a26c5cfba828a98fad70a559f34eb881289f9ce4f625a1 scripts/postinstall.js is a heavily obfuscated obfuscator.io-style: 270+ entry rotated string array, RC4+base64 decoders, hex-encoded dispatchers...

5.9AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•9 views

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libexif vulnerabilities (USN-8531-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8531-1 advisory. It was discovered that libexif had an integer overflow in its MakerNote decoder when called with a zero- length buffer. An attack...

7.8CVSS6.7AI score0.00164EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•1 views

CVE-2026-49854: Buffer Over-read

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocketmask without validating that the mask argument is exactly four bytes, allowing the C function to read up to three bytes beyond the provided...

5.3CVSS5.9AI score0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder