Lucene search
+L

61595 matches found

Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•16 views

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.8AI score0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 4:12 p.m.•38 views

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS0.00318EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•15 views

Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.8AI score0.00318EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•17 views

Raw Image Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

8.8CVSS6.5AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•13 views

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•12 views

Windows Image Acquisition Information Disclosure Vulnerability

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...

4.7CVSS5.8AI score0.00311EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•15 views

Microsoft WebP Image Extension Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•27 views

HEIF Image Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•12 views

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•16 views

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00264EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2026/09/08 11:49 a.m.•21 views

What It Took to Reach 1 Billion Build Manifests

In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what's actually behind them. The...

5.7AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/09/08 9:56 a.m.•36 views

Security update for emacs

This update for emacs fixes the following issues: Arbitrary code execution when opening a specially crafted file bsc1275941. CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color ind...

7.1CVSS6.8AI score0.00145EPSS
SaveExploits0References10
osv_suse
osv_suse
•added 2026/09/08 9:56 a.m.•9 views

SUSE-SU-2026:4083-1 Security update for emacs

This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color...

7.8CVSS6.7AI score0.00145EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 7:43 a.m.•9 views

Important: Red Hat Security Advisory: Red Hat Directory Server 13.2 container image update

An updated Red Hat Directory Server 13.2 container image for RHEL 10 is now available in the Red Hat container registry, including bug fixes and security patches. Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly. To pull th...

7.5CVSS6.2AI score0.00847EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•31 views

PT-2026-87641

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69649: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/08 12:00 a.m.•22 views

CVE-2026-78741

Silverpeas Core versions

6.1CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

5.8AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-69341: Use After Free

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69500: Use After Free

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder