90427 matches found
libtiff Heap Buffer Overflow DoS
The vulnerability of the tools/tiffcrop.c component in the libtiff library is related to a mistake in releasing memory that has already been released before. Exploiting this vulnerability could allow an attacker to cause a service failure...
ImageMagick ReadSFWImage DoS
The vulnerability of the ReadSFWImage function in the ImageMagick console graphics editor’s coders/sfw.c file is related to pointer manipulation errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
PT-2026-114567
Уязвимость набора инструментов для веб-разработки DevTools браузеров Google Chrome и Microsoft Edge связана с ошибкой единичного смещения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации...
PT-2026-81726
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An off-by-one error in DevTools allows a remote attacker to potentially read memory inside the sandbox. This issue can be exploited through social engineering using a crafted Chrome...
ImageMagick DoS
The vulnerability of the console-based graphic editor ImageMagick is related to a offset error of one unit. Exploiting this vulnerability can allow an attacker to cause a service failure...
Medium: nerdctl
Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...
CVE-2026-55438: Origin Validation Error
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the...
PT-2026-56492
Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.18 Description The library coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers. This behavior causes downstream path handling, such as normalizeWindowsPathentry.path.split'/', to...
Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS
The vulnerabilities of the functions secallocreqid and secfreereqid in the driver drivers/crypto/hisilicon/sec2/seccrypto.c of the Linux kernel cryptographic accelerator driver are related to synchronization errors during interrupt processing. Exploiting these vulnerabilities could allow an...
Important: docker
Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...
Important: docker
Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...
PT-2026-56359
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue occurs when the application opens a PDF file containing an abnormal Unity 3D object. During the parsing process, the application incorrectly resolves a portion of the...
PT-2026-56340
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue occurs when the application opens a PDF and JavaScript performs operations on the page and document. This causes page-related objects to lose synchronization, while t...
PT-2026-56518
Name of the Vulnerable Software and Affected Versions Mistune versions prior to 3.3.0 Description The Include directive in src/mistune/directives/include.py only detects direct self-includes and fails to identify indirect cycles. This allows two markdown files that include each other to trigger...
IBM Watsonx.Data intelligence log information leakage vulnerability
IBM WatsonX.Data Intelligence is a data management and analysis platform provided by American company IBM. IBM WatsonX.Data Intelligence has a vulnerability related to log information leakage. This vulnerability stems from the disclosure of detailed technical error messages. Attackers can exploit...
PT-2026-67271
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A heap out-of-bounds read exists in the update process glyph fragments and glyph cache fragment put functions within libfreerdp/cache/glyph.c. The issue occurs during the handling of a GLYPH FRAGMEN...
Linux Distros Unpatched Vulnerability : CVE-2026-14740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes...
CVE-2026-59723: Origin Validation Error
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebSocket connections on the /browser endpoint without validating the Origin header, and when ROOMSECRET is unset for loc...
golang-x-image DoS
The vulnerability of the golang-x-image package, a programming language, is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ImageMagick magick/profile.c Code Execution
The vulnerability of the magick/profile.c file, a console-based image editing tool from ImageMagick, is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...