Lucene search
+L

52764 matches found

Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.14 views

PT-2026-56547

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.14.1 Description An attacker can craft a PDF file with a page content stream containing an unterminated inline image. This leads to an infinite loop during the detection of the inline image end marker, which can occur...

8.7CVSS6AI score0.0034EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:00 a.m.16 views

Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3786 (ALAS-2026-3786)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3786 advisory. ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data wher...

9.2CVSS6.4AI score0.00884EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.20 views

The vulnerability of the ReadSFWImage() function in the ImageMagick console graphics editor’s coders/sfw.c file allows a hacker to induce a service failure.

The vulnerability of the ReadSFWImage function in the ImageMagick console graphics editor’s coders/sfw.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.6AI score0.00376EPSS
SaveExploits0References6Affected Software5
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.18 views

PT-2026-56352

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An abnormal image object causes the renderer to enter an incorrect processing branch. During the conversion of scan lines, the application uses an invalid image buffer pointer...

6.1CVSS6.1AI score0.00107EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.10 views

The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

9.4CVSS6.5AI score0.0037EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.11 views

The vulnerability of the JPEG encoder in the console-based graphic editor ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the JPEG encoder in console-based image editing software ImageMagick relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created image...

7.8CVSS7.1AI score0.00327EPSS
SaveExploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-58266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal...

6.5CVSS6.2AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.15 views

PT-2026-56397

Name of the Vulnerable Software and Affected Versions Imager versions prior to 1.033 Description Imager for Perl incorrectly treats unsigned EXIF IFD Image File Directory entry counts as signed. When processing large entry count values, the software interprets them as negative numbers, which can...

9.8CVSS6.1AI score0.00374EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.9 views

PT-2026-61004

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1 Description An integer overflow occurs when processing screen update messages in the vnc-any connection mode. A remote VNC server can send crafted image dimensions that cause an integer overflow during memory...

8.2CVSS5.5AI score0.00392EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.16 views

PT-2026-56528

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.14.0 Description An attacker can craft a PDF file with declared image size values that are significantly larger than the actual data. This leads to excessive memory consumption during the image parsing process within...

6.9CVSS6AI score0.00303EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.15 views

PT-2026-56546

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.14.2 Description An attacker can craft a PDF file with a page content stream containing an unterminated inline image that utilizes ASCII85 or ASCIIHex filters. This leads to an infinite loop during the parsing process...

8.7CVSS6AI score0.00367EPSS
SaveExploits0References20
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.8 views

The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor allows a hacker to trigger a service failure.

The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.00327EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.11 views

The vulnerability of the JBIG decoder in the console-based image editing software ImageMagick allows a hacker to induce a service failure.

The vulnerability of the JBIG decoder in the ImageMagick console-based graphics editor is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.4AI score0.00353EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:00 a.m.13 views

The vulnerability of the implementation of security policies for the console-based graphic editor ImageMagick, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the ImageMagick console-based graphic editor’s security implementation is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00135EPSS
SaveExploits0References4Affected Software3
RedHat Linux
RedHat Linux
added 2026/07/07 7:24 p.m.21 views

Important: Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview

A new satellite/foreman-mcp-server-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Satellite provides a container image that you can use to run an MCP server locally. The MCP server for Satellite is designed for advanced reporting and data analysi...

10CVSS5.8AI score0.00909EPSS
SaveExploits4References9
NVD
NVD
added 2026/07/07 7:16 p.m.15 views

CVE-2026-48953

Lack of escaping leads to an XSS vulnerability in the generic image output layout...

8.4CVSS0.00147EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/07 7:16 p.m.14 views

CVE-2026-48953

Lack of escaping leads to an XSS vulnerability in the generic image output layout...

6.1CVSS6AI score
SaveExploits0References1
CVE
CVE
added 2026/07/07 5:30 p.m.37 views

CVE-2026-48953

CVE-2026-48953 affects Joomla! Core. The issue is an XSS in the generic image output layout caused by a lack of escaping in the rendering path. Affected software is Joomla! Core (security entry notes this under 2026-07-07). The root cause is input/output escaping not being applied when generating...

8.4CVSS5.9AI score0.00147EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/07 5:30 p.m.17 views

EUVD-2026-42062

Lack of escaping leads to an XSS vulnerability in the generic image output layout...

8.4CVSS5.9AI score0.00147EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 5:30 p.m.10 views

CVE-2026-48953

Lack of escaping leads to an XSS vulnerability in the generic image output layout...

8.4CVSS5.9AI score0.00147EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder