Lucene search
+L

322046 matches found

OSV
OSV
added 6 days ago5 views

JLSEC-2026-1077 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs...

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service...

6.3CVSS5.8AI score0.00232EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago6 views

JLSEC-2026-964 ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks. ==841485==ERROR: LeakSanitizer: detected memory leaks Direct leak of 13512 bytes in 1 objects allocated from: 0 0x7ff330759887 in interceptormalloc...

7.5CVSS6.8AI score0.00438EPSS
SaveExploits0References5
OSV
OSV
added 6 days ago6 views

JLSEC-2026-1032 ImageMagick: Memory Leak in wand option parser when providing invalid arguments

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS5.8AI score0.00111EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago5 views

JLSEC-2026-1073 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory...

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service...

2.9CVSS5.9AI score0.00102EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago5 views

JLSEC-2026-1056 ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an...

ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service...

4.8CVSS5.9AI score0.00111EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago5 views

JLSEC-2026-1045 ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

1.9CVSS5.9AI score0.00169EPSS
SaveExploits1References5
CVE
CVE
added 6 days ago21 views

CVE-2026-58216

CVE-2026-58216 : An out-of-bounds read (heap OOB) vulnerability in Samba’s Kerberos KDC kpasswd service when parsing malformed ASN.1 password-change requests can read up to six bytes beyond the allocated buffer. An authenticated attacker could cause the KDC to crash, triggering denial of service....

5.3CVSS5.7AI score0.00515EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago8 views

CVE-2026-11897

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

7.5CVSS0.00299EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago12 views

EUVD-2026-50502

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits0References4
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-50500

MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion DoS...

6.2CVSS6AI score0.00129EPSS
SaveExploits0References4
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-50563

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion Unbounded Map Growth...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 6 days ago9 views

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

Summary OliveTin's OAuth2 login handler stores per-login state in an in-memory map registeredStates that grows unboundedly. States are added on every /oauth/login request but are never deleted or expired. An unauthenticated attacker can send millions of requests to /oauth/login to fill the map wi...

7.5CVSS5.9AI score0.00354EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 6 days ago35 views

CVE-2026-11897

IBM WebSphere Application Server Liberty (17.0.0.3–26.0.0.7) is affected by CVE-2026-11897, a denial-of-service vulnerability triggered by specially crafted HTTP/2 requests. The issue impacts Liberty with servlet-3.1/4.0/5.0/6.x features enabled, allowing a remote attacker to exhaust memory resou...

7.5CVSS5.9AI score0.00299EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 6 days ago11 views

CVE-2026-11897 IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

7.5CVSS5.9AI score0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago34 views

CVE-2026-11897 IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

7.5CVSS0.00299EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 6 days ago8 views

CVE-2026-52863

A flaw was found in Unbound, a validating, recursive, and caching Domain Name System DNS resolver. When configured with specific modules and under heavy load, a memory corruption vulnerability can occur due to improper handling of view names during subquery processing. This issue could lead to a...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago12 views

CVE-2026-66037

A flaw was found in FFmpeg. An uncontrolled resource consumption vulnerability exists in the IAMF demuxer. An unauthenticated attacker can exploit this by supplying a specially crafted input file with a malicious countlabel field. This can cause the system to allocate a large amount of memory,...

7.1CVSS5.8AI score0.00282EPSS
SaveExploits0References6
OSV
OSV
added 6 days ago17 views

USN-8625-1 openssl vulnerability

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 6 days ago9 views

CVE-2026-66036

A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the vfhqdn3d filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent...

8.8CVSS6.4AI score0.00288EPSS
SaveExploits0References6
Rockylinux
Rockylinux
added 6 days ago6 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

9.8CVSS6.2AI score0.00436EPSS
SaveExploits0
Rows per page
Query Builder