Lucene search
+L

15371 matches found

NVD
NVD
•added 2026/04/27 1:16 p.m.•30 views

CVE-2026-7040

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

7.5CVSS0.00693EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/27 12:29 p.m.•15 views

CVE-2026-7040

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

7.5CVSS5.9AI score0.00693EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/04/27 12:29 p.m.•48 views

CVE-2026-7040 Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

0.00693EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/27 12:29 p.m.•10 views

CVE-2026-7040 Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

5.9AI score0.00693EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/27 12:29 p.m.•14 views

CVE-2026-7040 Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

7.5CVSS6AI score
SaveExploits0References7
CVE
CVE
•added 2026/04/27 12:29 p.m.•36 views

CVE-2026-7040

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

5.9AI score0.00693EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/04/27 12:29 p.m.•17 views

EUVD-2026-25833

Text::Minify::XS versions from v0.3.0 before v0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minnify...

7.5CVSS5.4AI score0.00693EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/27 12:16 p.m.•18 views

CVE-2026-5941

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS0.0016EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/27 12:11 p.m.•12 views

USN-8209-1 lcms2 vulnerability

It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS6AI score0.00442EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2026/04/27 12:11 p.m.•26 views

USN-8209-1: Little CMS vulnerability

It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS6.1AI score0.00442EPSS
SaveExploits1
attackerkb
attackerkb
•added 2026/04/27 11:00 a.m.•11 views

CVE-2026-5941

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS5.2AI score0.0016EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2026/04/27 11:00 a.m.•19 views

EUVD-2026-25827

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS5.2AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/27 10:13 a.m.•16 views

CVE-2026-31681

A flaw was found in the Linux kernel's netfilter xtmultiport module. This vulnerability arises from insufficient validation of range encoding within the checkentry function. A local attacker can exploit this by crafting malformed multiport rules, which causes the portsmatchv1 function to read...

6.1CVSS5.1AI score0.0017EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/04/27 1:50 a.m.•20 views

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

9.1CVSS7.5AI score0.01625EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•20 views

Text::Minify::XS 安全漏洞

Text::Minify::XS is a text compression tool developed by Robert Rothenberg, designed to quickly remove excess whitespace from multi-line texts. Versions of Text::Minify::XS from v0.3.0 to v0.7.8 contained security vulnerabilities. These vulnerabilities were caused by a stack overflow vulnerabilit...

7.5CVSS5.9AI score0.00693EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•18 views

PT-2026-35416

Name of the Vulnerable Software and Affected Versions Text::Minify::XS versions 0.3.0 through 0.7.7 Description A heap overflow occurs when processing certain malformed UTF-8 characters. The minify function and its alias minify utf8 mishandle these characters, which leads to heap corruption...

7.5CVSS5.9AI score0.00693EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•0 views

CVE-2026-7040: Improper Handling of Unicode Encoding

Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, leading to heap corruption. Note that the minifyutf8 function is an alias for minify...

7.5CVSS5.9AI score0.00693EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•25 views

PT-2026-35403

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS5.1AI score0.0016EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/26 10:17 p.m.•14 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS0.00123EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/26 1:19 p.m.•19 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a local denial-of-service vulnerability: processing a specially crafted PNG with an oversized buffer causes the application to crash during PNG-to-PDF conversion. Root cause: malformed PNG triggers a crash in the image-to-text pipeline. Impact is local, with av...

6.9CVSS5.5AI score0.00123EPSS
SaveExploits0References3
Rows per page
Query Builder