684 matches found
CVE-2026-30979 iccDEV has a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp triggered with local user interaction causing memory corruption/crash. This vulnerability is fixed in 2.3.1.5...
CVE-2026-30979
iccDEV contains a heap-based buffer overflow in CIccCalculatorFunc::InitSelectOp(), exploitable with local user interaction and causing memory corruption/crash. Affected versions are prior to 2.3.1.5; the issue is fixed in 2.3.1.5. This CVE has a high impact (confidentiality, integrity, and avail...
iccDEV 缓冲区错误漏洞
iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stems from a heap buffer overflow in the CIccCalculatorFunc::InitSelectOp function, which could...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005709)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005709 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: call oprelease, even when opfunc returns an error For ops with trivial replies,...
agentiq-semantic-kernel (>=1.0.0 <=1.1.0a20250428), agixt (>=1.1.76b0 <=1.3.71) +9 more potentially affected by CVE-2026-26030 via semantic-kernel (>=0.2.9.dev0 <=1.35.3)
semantic-kernel PYPI version =0.2.9.dev0, =1.0.0, =1.1.76b0, =1.1.0, =0.1.1, =0.1.0, =0.3.0, =1.2.0, =0.2.0, =0.0.1, =1.0.0, =1.0.9 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...
CVE-2025-71237 nilfs2: Fix potential block overflow that cause system hang
In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block overflow that cause system hang When a user executes the FITRIM command, an underflow can occur when calculating nblocks if endblock is too small. Since nblocks is of type sectort, which is u64, a...
📄 MongoDB BSON Decompression OP_COMPRESSED Memory Disclosure
This Metasploit module demonstrates an educational memory leak in MongoDB BSON decompression. It sends malformed BSON in OPCOMPRESSED messages to trigger memory disclosure. Quite a huge list of versions are affected...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, gptscript, mage, knative-eventing, crossplane, mods, splunk-otel-collector, gomplate, tempo, terraform-docs, confluent-cp-docker-utils, wave, kserve-rest-proxy, sonobuoy, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, gptscript, knative-eventing, crossplane, mods, splunk-otel-collector, gomplate, tempo, terraform-docs, wave, kserve-rest-proxy, sonobuoy, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs, configmap-reload,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, gptscript, mage, knative-eventing, crossplane, mods, splunk-otel-collector, gomplate, tempo, terraform-docs, confluent-cp-docker-utils, wave, kserve-rest-proxy, sonobuoy, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: cri-tools, percona-server-mongodb-operator-fips, azure-container-networking, crossplane-provider-aws-elasticache, nova-fips, newrelic-k8s-metadata-injection, helm-operator, terraform-provider-sendgrid-fips, clickhouse-operator, aws-flb-firehose-fips, nri-prometheus,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: cri-tools, percona-server-mongodb-operator-fips, azure-container-networking, crossplane-provider-aws-elasticache, nova-fips, iptables-wrappers, newrelic-k8s-metadata-injection, helm-operator, terraform-provider-sendgrid-fips, clickhouse-operator, aws-flb-firehose-fip...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: cri-tools, percona-server-mongodb-operator-fips, azure-container-networking, crossplane-provider-aws-elasticache, nova-fips, iptables-wrappers, newrelic-k8s-metadata-injection, helm-operator, terraform-provider-sendgrid-fips, clickhouse-operator, aws-flb-firehose-fip...
agentiq-semantic-kernel (>=1.0.0 <=1.1.0a20250428), agixt (>=1.1.76b0 <=1.3.71) +9 more potentially affected by CVE-2026-25592 via semantic-kernel (>=0.2.9.dev0 <=1.35.3)
semantic-kernel PYPI version =0.2.9.dev0, =1.0.0, =1.1.76b0, =1.1.0, =0.1.1, =0.1.0, =0.3.0, =1.2.0, =0.2.0, =0.0.1, =1.0.0, =1.0.9 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...
CVE-2026-23109 fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()
In the Linux kernel, the following vulnerability has been resolved: fs/writeback: skip ASNODATAINTEGRITY mappings in waitsbinodes Above the while loop in waitsbinodes, we document that we must wait for all pages under writeback for data integrity. Consequently, if a mapping, like fuse,...
Op Neusploit: Russian APT28 Uses Microsoft Office Flaw in Malware Attacks
A new campaign by the Russian-linked group APT28, called Op Neusploit, exploits a Microsoft Office flaw to steal emails for remote control of devices in Ukraine, Slovakia, and Romania...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001672)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001672 advisory. A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local...
CVE-2020-23588
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp "...
CVE-2026-21688 iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in SIccCalcOp::ArgsPushed at IccProfLib/IccMpeCalc.cpp. This...
