277962 matches found
GHSA-W4HW-QCX7-56PR Shescape: Shell injection via unescaped parentheses on Windows with CMD
Impact This impacts users of Shescape on Windows that explicitly configure shell to CMD, or true with the default shell being CMD, using the escape and escapeAll APIs. An attacker may be able to achieve shell injection depending on the original command. javascript import as cp from...
EUVD-2026-48738
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vfhqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the...
CVE-2026-15968
creationtimestamp| type| source ---|---|--- 2026-07-24 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-6 2026-07-31 12:40:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrwxywh52x23...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
EUVD-2026-48717
sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands as the web server process user by setting a malicious backup path and triggering a backup. The FileBackupService builds a tar shell command via stri...
ImageMagick: Memory Leak in TIFF encoder when an allocation fails
When an allocation fails in the TIFF encoder a small memory leak will occur...
ImageMagick: Memory Leak in hough lines operation when an operation fails
When a specific operation fails in the hough lines operation a small memory leak will occur...
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails
When transforming an image to the log colorspace a small memory leak happens when the operation fails...
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.
When a temporary file can not be created a small memory leak will happen in the TIFF encoder...
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
An incomplete fix of CVE-2026-49219 could result in a policy bypass...
ImageMagick: Policy Bypass in concatenate operation due to missing checks
The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
When providing invalid arguments to the connected-components option an infinite loop will occur...
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...
CVE-2026-10610
CVE-2026-10610 affects ESET security applications for macOS. It is a Local Privilege Escalation that could allow a low-privileged user to execute arbitrary code with elevated privileges. Exploitation would be LOCAL with LOW complexity and no user interaction required; the impact targets confident...
EUVD-2026-48534
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...
[SECURITY] Fedora 44 Update: dotnet8.0-8.0.129-2.fc44
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
EUVD-2026-48439
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
HPESBNW05085 rev.1 - HPE Unified Correlation Analyzer (UCA), Multiple Vulnerabilities
Potential Security Impact: Local: Compromise of System Integrity, XML External Entity XXE; Remote: Compromise of System Integrity, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Correlation Analyzer UCA All versions prior to 4.4.11 CVSS Scores:...
openSUSE 16: cockpit / cockpit-bridge / cockpit-devel / cockpit-firewalld / etc (openSUSE-SU-2026:21399-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21399-1 advisory. Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from glob...
