Lucene search
+L

142 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•11 views

Astra Linux – Vulnerability in edk2

EDK2 is vulnerable to a vulnerability in the Tcg2MeasurePeImage function, which allows a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in compromises of confidentiality, integrity, and/or availability...

7.8CVSS7.1AI score0.0029EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/08/19 1:03 a.m.•11 views

[SECURITY] Fedora 44 Update: perl-Imager-1.034-1.fc44

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

7.5CVSS5.9AI score0.00508EPSS
SaveExploits0
OSV
OSV
•added 2026/07/15 7:50 p.m.•16 views

DRUPAL-CORE-2026-010

The Image module allows you to define and configure image fields. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than private://. This vulnerability is mitigated by the fact that Drupal must be configured to use a...

4.2CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•33 views

PT-2026-60353

Name of the Vulnerable Software and Affected Versions Drupal core versions 0.0.0 through 10.6.13 Drupal core versions 11.3.0 through 11.3.14 Drupal core versions 11.4.0 through 11.4.4 Drupal core versions 0.0.0 through 11.0.x Drupal core versions 0.0.0 through 11.1.x Drupal core versions 0.0.0...

5.8AI score0.00122EPSS
SaveExploits0References4
Drupal
Drupal
•added 2026/07/15 12:00 a.m.•30 views

Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010

The Image module allows you to define and configure image fields. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than private://. This vulnerability is mitigated by the fact that Drupal must be configured to use a...

4.2CVSS5.9AI score0.00122EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/07/14 9:00 p.m.•12 views

Missing Authorization

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Missing Authorization in the deliver method of ImageStyleDownloadController Image module, which classified any scheme other tha...

4.2CVSS5.6AI score0.00122EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/07/07 12:51 a.m.•25 views

[SECURITY] Fedora 44 Update: perl-Imager-1.032-1.fc44

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

7.5CVSS5.9AI score0.00609EPSS
SaveExploits0
NVD
NVD
•added 2026/04/06 9:16 a.m.•21 views

CVE-2026-5639

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS0.00316EPSS
SaveExploits0References5
CNVD
CNVD
•added 2026/02/11 12:00 a.m.•41 views

Huawei HarmonyOS Image Module Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS Image Module, which stems from the Image Module failing to properly validate the length and si...

7.3CVSS6.1AI score0.00093EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/07 1:12 p.m.•12 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS5.5AI score0.00093EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/06 9:15 a.m.•14 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS6AI score0.00093EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/06 9:15 a.m.•17 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS0.00093EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/06 8:22 a.m.•12 views

EUVD-2026-5647

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS5.5AI score0.00093EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/06 8:22 a.m.•6 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS5.6AI score0.00093EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/06 8:22 a.m.•56 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS0.00093EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/06 8:22 a.m.•6 views

CVE-2026-24925

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS6.1AI score0.00093EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/06 8:22 a.m.•55 views

CVE-2026-24925

CVE-2026-24925 is described as a heap-based buffer overflow in the image module with potential impact to availability. The available documents confirm the root cause (heap-based overflow) and the impact (availability), but they do not specify the affected product name, vendor, exact component/ver...

7.3CVSS6.1AI score0.00093EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/06 12:00 a.m.•3 views

CVE-2026-24925: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability...

7.3CVSS6.1AI score0.00093EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•26 views

PT-2026-6701

Name of the Vulnerable Software and Affected Versions versions prior to 2026 affected versions not specified Description A heap-based buffer overflow vulnerability exists in the image module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no...

7.3CVSS5.8AI score0.00093EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•25 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS Image Module, which stems from the Image Module failing to properly validate the length and si...

7.3CVSS6AI score0.00093EPSS
SaveExploits0References2
Rows per page
Query Builder