Lucene search
+L

4257 matches found

Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•28 views

PT-2026-58765

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.5AI score0.00337EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-59198: Out-of-bounds Read

Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0...

7.5CVSS6.9AI score0.00313EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•0 views

CVE-2026-48370: Out-of-bounds Write

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•0 views

CVE-2026-48366: Out-of-bounds Write

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•33 views

PT-2026-58767

Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

5.5CVSS6AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•27 views

PT-2026-58799

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.5AI score0.00256EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•16 views

Adobe Media Encoder < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-72)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-72 advisory. - Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

7.8CVSS7.2AI score0.00337EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•23 views

PT-2026-58766

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.5AI score0.00256EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•13 views

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21291-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21291-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read...

9.2CVSS6.7AI score0.01643EPSS
SaveExploits1References31
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•38 views

PT-2026-58802

Name of the Vulnerable Software and Affected Versions Media Encoder affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer, which can lead to memory corruption. This issue could result in arbitrary code...

7.8CVSS6.5AI score0.00256EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•2 views

CVE-2026-47971: Stack-based Buffer Overflow

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/07/13 9:26 a.m.•18 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...

8.3CVSS6.2AI score0.01934EPSS
SaveExploits5References168
OSV
OSV
•added 2026/07/13 9:26 a.m.•12 views

SUSE-SU-2026:2877-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. - CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...

9.2CVSS6.3AI score0.01934EPSS
SaveExploits5References85
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•13 views

The vulnerability of the `io.netty.handler.codec.redis.RedisEncoder` component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to inject arbitrary commands.

The vulnerability of the io.netty.handler.codec.redis.RedisEncoder component in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper code generation. Exploiting this vulnerability allows a remote attacker to inject arbitrary...

8.1CVSS7.2AI score0.0018EPSS
SaveExploits1References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/07/12 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-61870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/11 7:40 p.m.•24 views

CVE-2026-61870

A flaw was found in ImageMagick. This vulnerability involves a memory leak within the VIFF encoder, a component responsible for handling image files. An attacker could exploit this by providing specially crafted VIFF images, which would trigger memory allocation failures. This action can exhaust...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References5
NVD
NVD
•added 2026/07/11 2:16 p.m.•31 views

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS0.00191EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/11 2:16 p.m.•15 views

DEBIAN-CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/11 2:16 p.m.•20 views

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS0.00246EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/11 2:16 p.m.•15 views

UBUNTU-CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References6
Rows per page
Query Builder