Lucene search
+L

19473 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/26 12:0 a.m.22 views

nginx 0.6.27 < 1.30.1 ngx_http_rewrite_module Heap Buffer Overflow

The installed version of nginx is 0.6.27 prior to 1.30.1. It is, therefore, affected by the following issue: - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set...

9.2CVSS8.8AI score0.61469EPSS
SaveExploits41References3
RedhatCVE
RedhatCVE
added 2026/05/25 11:8 p.m.13 views

CVE-2026-41071

A flaw was found in libheif, a library for decoding and encoding HEIF High Efficiency Image File Format and AVIF files. A remote attacker could exploit this vulnerability by providing a specially crafted HEIF sequence file. When parsing the file, if the saiz sample auxiliary information box...

8.1CVSS5.8AI score0.00302EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/25 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-41071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples...

8.1CVSS6.3AI score0.00302EPSS
SaveExploits1References2
OSV
OSV
added 2026/05/24 12:15 a.m.12 views

OSV-2026-805 Heap-buffer-overflow in ihevcd_fmt_conv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515832483 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ihevcdfmtconv ihevcddecode ihevcdcxaapifunction...

5.8AI score
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/05/22 8:59 p.m.52 views

CVE-2026-41071

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track's chunk table causes a heap-buffer-overflow out-of-bounds read in the SampleAuxInfoReader constructor. T...

8.1CVSS5.8AI score0.00302EPSS
SaveExploits1
CVE
CVE
added 2026/05/22 2:11 p.m.348 views

CVE-2026-9256

NGINX Plus and NGINX Open Source expose a vulnerability in the ngx_http_rewrite_module when a rewrite directive uses distinct, overlapping PCRE captures (e.g., ^/((.*))$) and the replacement references multiple captures (e.g., $1$2) in redirects or arguments. An unauthenticated attacker can send ...

9.2CVSS6.2AI score0.04261EPSS
SaveExploits3References13Affected Software2
OSV
OSV
added 2026/05/22 1:17 p.m.19 views

OESA-2026-2388 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References17
OSV
OSV
added 2026/05/22 1:14 p.m.11 views

GHSA-6GXQ-F64P-5W6F ImageMagick: Heap Buffer Over-Read in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process...

5.7CVSS5.9AI score0.00093EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/22 1:14 p.m.20 views

ImageMagick: Heap Buffer Over-Read in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process...

5.7CVSS5.9AI score0.00093EPSS
SaveExploits0References2Affected Software17
Snyk
Snyk
added 2026/05/22 1:10 p.m.14 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/22 1:10 p.m.10 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/22 1:10 p.m.12 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/22 1:10 p.m.12 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/22 1:10 p.m.11 views

GHSA-P93H-F2JC-477J ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/22 1:10 p.m.20 views

ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score0.00092EPSS
SaveExploits0References2Affected Software17
Microsoft CVE
Microsoft CVE
added 2026/05/22 4:43 a.m.22 views

Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00538EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-45624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a...

5.1CVSS5.4AI score0.0012EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.16 views

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of service...

8.8CVSS6.2AI score0.00206EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-46520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple...

7.5CVSS7AI score0.00441EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.17 views

Off-by-one Error

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder