Lucene search
+L

20027 matches found

Snyk
Snyk
added 2026/07/01 9:19 p.m.9 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 9:19 p.m.7 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 9:19 p.m.10 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/01 9:8 p.m.9 views

CVE-2026-54260

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, an authenticated admin user can trigger expensive rendition processing with purposefully crafted filter specs resulting in potentially service degradation. The vulnerability is not...

4.3CVSS5.6AI score0.0022EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/01 7:51 p.m.13 views

CVE-2026-53345

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. This vulnerability occurs when a virtual machine is shutting down, and KVM attempts to mark memory as dirty without an active virtual CPU. This can lead to a memory leak, impacting system stability and resource...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/01 7:16 p.m.5 views

UBUNTU-CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

5.3CVSS5.8AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/01 5:16 p.m.13 views

CVE-2026-34117

Guardian language-system passes the id GET parameter directly into a PHP exec call in texttosubtitles.php line 19 without sanitization: exec"php jobs/texttosubtitles.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell...

9.8CVSS0.00537EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/01 4:27 p.m.65 views

CVE-2026-20216

CVE-2026-20216 concerns ClamAV’s InstallShield file format parser. The vulnerability arises from improper handling of temporary resources during scanning, enabling an unauthenticated, remote attacker to submit a crafted InstallShield file that can terminate the ClamAV scanning process and tempora...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/01 4:18 p.m.14 views

EUVD-2026-41067

Guardian language-system passes the id GET parameter directly into a PHP exec call in speech.php line 18 without sanitization: exec"php jobs/speechaudio.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell metacharacters...

9.8CVSS6.1AI score0.00537EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/01 1:32 p.m.10 views

CVE-2026-53332

In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when the PDR lookup is being registered, or in the...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References9Affected Software1
Rockylinux
Rockylinux
added 2026/07/01 12:3 p.m.10 views

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

9.6CVSS6.7AI score0.00655EPSS
SaveExploits0
OSV
OSV
added 2026/07/01 12:3 p.m.9 views

RLSA-2026:30854 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycod...

8.2CVSS6.7AI score0.00655EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/01 11:30 a.m.81 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.68 packages and security update

Red Hat OpenShift Container Platform release 4.14.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

10CVSS6.9AI score0.01945EPSS
SaveExploits4References7
RedHat Linux
RedHat Linux
added 2026/07/01 9:31 a.m.21 views

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

9.8CVSS5.9AI score0.00504EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/01 12:34 a.m.13 views

EUVD-2026-40440

Capgo before 12.128.2 contains improper error handling in the /private/acceptinvitation endpoint that returns HTTP 500 instead of safe 4xx errors when magicinvitestring is invalid. Attackers can trigger this vulnerability using only the public key by submitting malformed magicinvitestring values ...

6.9CVSS5.8AI score0.0025EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/01 12:34 a.m.12 views

EUVD-2026-40638

Uninitialized Use in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00307EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/01 12:34 a.m.11 views

EUVD-2026-40561

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/01 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-13831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute...

7.5CVSS6.5AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/01 12:0 a.m.11 views

RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

9.6CVSS7.3AI score0.00813EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2026/07/01 12:0 a.m.9 views

The vulnerability of the nghttpx component in the nghttp2 library, which allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder