62651 matches found
PT-2026-52718
Name of the Vulnerable Software and Affected Versions Image Carousel versions prior to 1.0.0.42 Description Cross Site Scripting XSS exists in the Contributor role, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Image Carousel to a version...
PT-2026-52721
Mattermost versions 10.11.x = 10.11.18, 11.6.x = 11.6.3, 11.5.x = 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows an authenticated attacker to exfiltrate data to an attacker-controlled server via injecting markdown image syntax into to...
PT-2026-52849
Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.9 Description A Server-Side Request Forgery SSRF issue exists in the image import functionality. Authenticated users possessing the can create images entitlement can interact with internal network...
PT-2026-53016
Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.2.0 Description An arbitrary file write exists in the Incus client. This occurs when a malicious image server returns a specially crafted Incus-Image-Hash header. The client uses this header to determine the destinati...
CVE-2026-46604: Out-of-bounds Write
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...
CVE-2026-57231: Exposure of Sensitive Information to an Unauthorized Actor
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk wi...
CVE-2026-28385: Server-Side Request Forgery (SSRF)
In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...
CVE-2026-57431: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in Featured Image = 2.1 versions...
CVE-2026-30041: Uncontrolled Resource Consumption
An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service DoS via supplying a crafted PSD file...
CVE-2026-3472: Protection Mechanism Failure
Mattermost versions 10.11.x = 10.11.18, 11.6.x = 11.6.3, 11.5.x = 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows an authenticated attacker to exfiltrate data to an attacker-controlled server via injecting markdown image syntax into to...
CVE-2026-30040: Heap-based Buffer Overflow
A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current process via supplying a crafted JPEG 2000 JP2 file...
CVE-2025-68074: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...
PT-2026-56113
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image copy plane...
CVE-2026-30041
An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service DoS via supplying a crafted PSD file...
CVE-2026-30041
An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service DoS via supplying a crafted PSD file...
PT-2026-53024
Name of the Vulnerable Software and Affected Versions regclient affected versions not specified Description Authentication credentials for a registry may be leaked to external servers. This occurs when a malicious registry server, a malicious blob store, or a registry that fails to restrict...
PT-2026-52971
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The TIFF decoder can panic when processing an invalid image that contains an out-of-bounds strip offset. A panic is a critical error that causes a program to cra...
PT-2026-52793
Author Cross Site Scripting XSS in Featured Image = 2.1 versions...
