CVE-2026-45711 Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command downloads every message from a remote Mailpit instance and writes each one as .eml inside the user-supplied output directory. The message ID field is taken verbatim from the JSON...

SUSE CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

[SECURITY] Fedora 33 Update: cpu-x-4.1.0-3.fc33

Free software that gathers information on CPU, motherboard and more. CPU-X is similar to CPU-Z Windows, but CPU-X is a Free and Open Source software designed for GNU/Linux; also, it works on BSD. This software is written in C and built with CMake tool. It can be used in graphical mode by using GT...

ALPINE-CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

Silicon Graphics LibTiff 'DumpModeDecode' Function Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. A security vulnerability in the 'DumpModeDecode' function of Silicon Graphics LibTiff allows remote attackers to exploit the vulnerability to construct special TIFF images that can be tricked into being parsed by the user,...

Silicon Graphics LibTiff bmp2tiff Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'DumpModeEncode' function in Silicon Graphics LibTiff's bmp2tiff tool, which allows an attacker to...