Lucene search
+L

83 matches found

AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•15 views

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06. The option parser allows an attacker to overwrite a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The greatest threat from this vulnerability is to data confidentiality and...

7.2CVSS6.9AI score0.01009EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•9 views

CentOS Linux 7 [TuxCare] Security Update: radvd (CENTOS7:CLSA-2026:1785838548)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1785838548 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflo...

8.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•11 views

AlmaLinux 9.6 [TuxCare] Security Update: radvd (ALMALINUX9.6:CLSA-2026:1783421652)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783421652 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

8.8CVSS6AI score0.00333EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•9 views

AlmaLinux 9.2 [TuxCare] Security Update: radvd (ALMALINUX9.2:CLSA-2026:1783420753)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783420753 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

8.8CVSS6AI score0.00333EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/01 10:32 a.m.•11 views

CVE-2026-71402

A flaw was found in wicked. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can trigger an out-of-bounds read vulnerability in the DHCPv4 option parser. This allows the client to parse adjacent heap memory as DHCP options, potentially leading to the disclosure ...

5.4CVSS5.8AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•3 views

PT-2026-76072

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS5.3AI score0.00154EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/26 11:11 p.m.•29 views

EUVD-2026-36191

ImageMagick: Memory Leak in wand option parser when providing invalid arguments...

4CVSS5.7AI score0.00154EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/06/26 11:11 p.m.•21 views

ImageMagick: Memory Leak in wand option parser when providing invalid arguments

When providing invalid options to the wand option parser a small memory leak will occur...

4CVSS5.5AI score0.00154EPSS
SaveExploits0References4Affected Software17
OSV
OSV
•added 2026/06/26 11:11 p.m.•23 views

GHSA-J989-F892-2335 ImageMagick: Memory Leak in wand option parser when providing invalid arguments

When providing invalid options to the wand option parser a small memory leak will occur...

4CVSS5.5AI score0.00154EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/22 4:35 a.m.•28 views

kernel: netfilter: xt_tcpmss: check remaining length before reading optlen

A flaw was found in the Linux kernel, specifically within the netfilter: xttcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds...

8.2CVSS6.1AI score0.00463EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/19 12:00 a.m.•5 views

CVE-2026-48715: Stack-based Buffer Overflow

radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, printff copies up to 2032 bytes from attacker-controlled...

8.8CVSS6.1AI score0.00333EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/12 11:11 a.m.•23 views

OESA-2026-2641 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/06/11 11:13 a.m.•25 views

SUSE CVE-2026-53464

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS5.3AI score0.00154EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/06/11 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-53464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the...

4CVSS5.3AI score0.00154EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/10 11:16 p.m.•18 views

DEBIAN-CVE-2026-53464

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS5.3AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/10 11:16 p.m.•29 views

CVE-2026-53464

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

4CVSS0.00154EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/06/10 11:10 p.m.•32 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.1CVSS5.5AI score0.00154EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/10 11:10 p.m.•25 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.1CVSS5.5AI score0.00154EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/10 11:10 p.m.•20 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the wand option parser when invalid arguments are provided. An attacker can cause increased memory consumption by supplying specially crafted input. Remediation A fix was pushed into...

5.1CVSS5.6AI score0.00154EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/10 11:10 p.m.•24 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.1CVSS5.5AI score0.00154EPSS
SaveExploits0References2
Rows per page
Query Builder