Lucene search
+L

110 matches found

Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.36 views

PT-2026-6479

Summary SageMaker Python SDK is an open source library for training and deploying machine learning models on Amazon SageMaker. An issue where the HMAC secret key is stored in environment variables and disclosed via the DescribeTrainingJob API has been identified. Impact - Function and Payload...

8.5CVSS6.4AI score0.00473EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/01/14 8:22 p.m.10 views

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

8.8CVSS7.2AI score0.00698EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/13 9:15 p.m.13 views

CVE-2026-22861

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

8.8CVSS0.00698EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/13 8:20 p.m.52 views

CVE-2026-22861

CVE-2026-22861 affects iccDEV prior to version 2.3.1.2, where a heap-based buffer overflow occurs in SIccCalcOp::Describe() (IccProfLib/IccMpeCalc.cpp) when processing ICC color profiles. The vulnerability is fixed in iccDEV 2.3.1.2. Affected users should upgrade to 2.3.1.2 or later to remediate ...

8.8CVSS6.8AI score0.00698EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/01/13 8:20 p.m.23 views

EUVD-2026-2412

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

8.8CVSS6.7AI score0.00698EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/13 8:20 p.m.14 views

CVE-2026-22861 iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

8.8CVSS7.2AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/01/13 8:20 p.m.36 views

CVE-2026-22861 iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Prior to 2.3.1.2, There is a heap-based buffer overflow in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. This...

8.8CVSS0.00698EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.38 views

PT-2026-2800

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A heap-based buffer overflow exists in the SIccCalcOp::Describe function at...

8.8CVSS7AI score0.00698EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.18 views

iccDEV 安全漏洞

iccDEV is an open source color configuration codebase from the International Color Consortium. A security vulnerability exists in versions prior to iccDEV 2.3.1.2, which stems from a heap-based buffer overflow in the SIccCalcOp::Describe function...

8.8CVSS6AI score0.00698EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 8:38 a.m.12 views

CVE-2026-22047

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

8.8CVSS6.8AI score0.00373EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/07 10:15 p.m.11 views

CVE-2026-22047

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

8.8CVSS0.00373EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/07 10:05 p.m.43 views

CVE-2026-22047

iccDEV contains a heap-buffer-overflow vulnerability in SIccCalcOp::Describe() located in IccProfLib/IccMpeCalc.cpp for versions prior to 2.3.1.2. The issue affects users processing ICC color profiles. A patch is available in version 2.3.1.2. No public workarounds are documented in the provided s...

8.8CVSS6.4AI score0.00373EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/01/07 10:05 p.m.29 views

CVE-2026-22047 iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

8.8CVSS0.00373EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/07 10:05 p.m.12 views

CVE-2026-22047 iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow vulnerability in SIccCalcOp::Describe at IccProfLib/IccMpeCalc.cpp. Thi...

8.8CVSS6.7AI score
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.11 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code library from the International Color Consortium. A security vulnerability exists in iccDEV versions prior to 2.3.1.2 that stems from a heap buffer overflow in the SIccCalcOp::Describe function, which may result in memory corruption...

8.8CVSS7.2AI score0.00373EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.14 views

PT-2026-2146

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A heap-buffer-overflow vulnerability exists in the SIccCalcOp::Describe...

8.8CVSS6.6AI score0.00373EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2003-0050

Malware in sbrugna...

7.5CVSS6.3AI score0.02344EPSS
SaveExploits0References5
OSV
OSV
added 2025/09/05 5:10 p.m.8 views

MAL-2025-44990 Malicious code in lesson-clothing-describe (npm)

The package lesson-clothing-describe was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.6 views

Malicious code in lesson-clothing-describe (npm)

The package lesson-clothing-describe was found to contain malicious code...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:05 a.m.10 views

CVE-2023-30552

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the sql/instance.py endpoint's describe method. In several cases, user...

6.5CVSS8.2AI score0.00835EPSS
SaveExploits1References1
Rows per page
Query Builder