Lucene search
+L

277273 matches found

Github Security Blog
Github Security Blog
added 2026/07/24 2:35 p.m.14 views

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

When an allocation fails in the TIFF encoder a small memory leak will occur...

5.8AI score
SaveExploits0References3Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:34 p.m.14 views

ImageMagick: Memory Leak in hough lines operation when an operation fails

When a specific operation fails in the hough lines operation a small memory leak will occur...

5.8AI score
SaveExploits0References3Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:34 p.m.12 views

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

When transforming an image to the log colorspace a small memory leak happens when the operation fails...

5.9AI score
SaveExploits0References3Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:30 p.m.13 views

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

5.8AI score
SaveExploits0References3Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:8 p.m.32 views

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

An incomplete fix of CVE-2026-49219 could result in a policy bypass...

5.5CVSS6.1AI score0.00128EPSS
SaveExploits0References3Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:6 p.m.10 views

ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References4Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:5 p.m.8 views

ImageMagick: Infinite Loop in connected-components when providing invalid arguments

When providing invalid arguments to the connected-components option an infinite loop will occur...

4.7CVSS5.9AI score0.0009EPSS
SaveExploits0References4Affected Software17
Github Security Blog
Github Security Blog
added 2026/07/24 2:5 p.m.7 views

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References4Affected Software17
CVE
CVE
added 2026/07/24 11:14 a.m.20 views

CVE-2026-10610

CVE-2026-10610 affects ESET security applications for macOS. It is a Local Privilege Escalation that could allow a low-privileged user to execute arbitrary code with elevated privileges. Exploitation would be LOCAL with LOW complexity and no user interaction required; the impact targets confident...

8.5CVSS6.2AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 8:55 a.m.20 views

EUVD-2026-48534

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

7.8CVSS5.9AI score0.0011EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/07/24 6:28 a.m.1855 views

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

7.2CVSS7.8AI score0.95432EPSS
SaveExploits12References5
Fedora
Fedora
added 2026/07/24 12:57 a.m.6 views

[SECURITY] Fedora 44 Update: dotnet8.0-8.0.129-2.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

9.8CVSS7.1AI score0.01105EPSS
SaveExploits1
EUVD
EUVD
added 2026/07/24 12:32 a.m.9 views

EUVD-2026-48439

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...

6.5CVSS5AI score0.00233EPSS
SaveExploits0References9
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2026/07/23 9:54 p.m.23 views

Phoca Maps pre version 6.1.0, other

Phoca Maps pre version 6.1.0, other...

5.3AI score
SaveExploits0Affected Software1
OSV
OSV
added 2026/07/23 9:16 p.m.7 views

CVE-2024-58353 Cal.com through 4.7.15 Cross-Site Scripting via booking questions

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

9.3CVSS5AI score0.00298EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/23 8:1 p.m.6 views

CVE-2026-15968

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3...

7.1CVSS5.2AI score0.00181EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2026/07/23 6:20 p.m.14 views

CVE-2026-62521

creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

7.5CVSS7.3AI score0.00397EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/23 6:19 p.m.10 views

CVE-2026-61325

creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

7.6CVSS7.3AI score0.00308EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/23 5:46 p.m.8 views

CVE-2026-60768

creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

8.1CVSS4.9AI score0.00261EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/23 4:47 p.m.9 views

CVE-2026-60170

creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

7.5CVSS4.9AI score0.00377EPSS
SaveExploits0References1
Rows per page
Query Builder