Lucene search
+L

4727 matches found

BDU FSTEC
BDU FSTEC
•added 2026/03/04 12:00 a.m.•10 views

The vulnerability of the mem_dump_obj() function in the mm/util.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memdumpobj function in the mm/util.c module of the Linux kernel’s memory management subsystem is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7CVSS5.8AI score0.00199EPSS
SaveExploits0References15Affected Software3
attackerkb
attackerkb
•added 2026/03/02 6:43 p.m.•12 views

CVE-2026-0047

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00138EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/02 6:43 p.m.•47 views

CVE-2026-0047

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00138EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/21 12:16 a.m.•29 views

CVE-2026-27168

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytesperline value. The value os read directly from the file as the read size in...

9.8CVSS0.00663EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/21 12:16 a.m.•42 views

DEBIAN-CVE-2026-27168

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytesperline value. The value os read directly from the file as the read size in...

9.8CVSS5.7AI score0.00663EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/02/21 12:16 a.m.•9 views

CVE-2026-27168

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytesperline value. The value os read directly from the file as the read size in...

9.8CVSS5.9AI score0.00663EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/02/20 11:34 p.m.•14 views

CVE-2026-27168

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytesperline value. The value os read directly from the file as the read size in...

8.8CVSS5.9AI score0.00663EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/02/20 11:34 p.m.•14 views

CVE-2026-27168 SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytesperline value. The value os read directly from the file as the read size in...

8.8CVSS5.9AI score
SaveExploits0References3
OSV
OSV
•added 2026/02/20 11:16 p.m.•26 views

DEBIAN-CVE-2026-2048

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS7.8AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 11:16 p.m.•18 views

CVE-2026-2045

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS0.04723EPSS
SaveExploits0References15
OSV
OSV
•added 2026/02/20 11:16 p.m.•17 views

UBUNTU-CVE-2026-2045

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS6.2AI score0.04723EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/20 10:23 p.m.•9 views

CVE-2026-2048

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS6.4AI score0.00633EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/02/20 10:23 p.m.•18 views

CVE-2026-2048

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS7.6AI score0.00633EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/20 10:23 p.m.•65 views

CVE-2026-2048

CVE-2026-2048 refers to GIMP XWD file parsing Out-Of-Bounds Write with remote code execution. According to the connected advisories, the flaw is caused by insufficient validation of user-supplied data during XWD file parsing, allowing a write past the end of a heap/buffer to occur and enabling co...

7.8CVSS7.8AI score0.00633EPSS
SaveExploits0References15Affected Software1
CVE
CVE
•added 2026/02/20 10:23 p.m.•68 views

CVE-2026-2045

GIMP vulnerability CVE-2026-2045: XWD File Parsing Out-Of-Bounds Write enables Remote Code Execution. The issue arises during parsing of XWD image files due to insufficient validation of user-supplied data, causing a write past the end of an allocated buffer and allowing code execution in the att...

7.8CVSS7.8AI score0.04723EPSS
SaveExploits0References15Affected Software1
attackerkb
attackerkb
•added 2026/02/20 10:23 p.m.•18 views

CVE-2026-2045

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

7.8CVSS6.4AI score0.04723EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•15 views

GIMP 缓冲区错误漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a buffer error vulnerability, which stems from the lack of validation of data provided to users during the parsing of XWD files. This vulnerability may lead to out-of-bounds writing and remote code execution...

7.8CVSS7.6AI score0.04723EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•15 views

PT-2026-20859

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in GIMP’s parsing of XWD files, leading to a potential out-of-bounds write. This can allow a remote attacker to execute arbitrary code on systems running affected versions of GIMP...

7.8CVSS7.8AI score0.00633EPSS
SaveExploits0References8
OSV
OSV
•added 2026/02/13 11:10 a.m.•6 views

OESA-2026-1383 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

7CVSS6.6AI score0.0052EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/02/12 9:14 p.m.•69 views

SecureAgeExploit

SecureAge Responsible Disclosure PoCs This repository contain...

4.8CVSS5.5AI score0.00106EPSS
SaveExploits1
Rows per page
Query Builder