Lucene search
+L

46 matches found

RedhatCVE
RedhatCVE
•added 2026/10/08 11:53 p.m.•8 views

CVE-2026-105827

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted image file in the Continuous Acquisition and Life-cycle Support CALS format. Because the CALS decoder fails to properly limit recursion depth, processing the malicious image...

5.3CVSS5.9AI score0.00305EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/08 2:39 p.m.•5 views

CVE-2026-44037

A flaw was found in dcmtk. An attacker can cause a Denial of Service DoS by providing a crafted DICOM Digital Imaging and Communications in Medicine JSON document containing deeply nested sequence values. Processing this input triggers uncontrolled recursion in the JSON parser, causing stack memo...

6.8CVSS5.7AI score0.00105EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/08 2:38 p.m.•6 views

CVE-2026-44035

A flaw was found in DCMTK. An attacker could exploit this vulnerability by enticing a user or service to process a specially crafted DICOM directory DICOMDIR file containing deeply nested directory records. This issue triggers uncontrolled recursion during record processing, causing stack memory...

6.8CVSS5.7AI score0.00105EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•5 views

PT-2026-76389

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...

7.5CVSS6.7AI score0.007EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/13 12:00 a.m.•2 views

CVE-2026-33908: Uncontrolled Recursion

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...

7.5CVSS6.7AI score0.007EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-1537

Malware in sbrugna...

9.8CVSS8.2AI score0.04123EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•32 views

EUVD-2010-3684

Malware in sbrugna...

4CVSS6.2AI score0.01475EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-23394

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.00852EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/08/04 9:33 a.m.•39 views

CVE-2025-53012

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...

7.5CVSS7.1AI score0.00852EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/01 6:15 p.m.•18 views

CVE-2025-53012

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...

7.5CVSS0.00852EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•2 views

CVE-2025-53012: Uncontrolled Resource Consumption

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...

7.5CVSS5.8AI score0.00852EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•23 views

PT-2025-31672

Name of the Vulnerable Software and Affected Versions MaterialX version 1.39.2 Description MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. Nested imports of MaterialX files can lead to a crash due to stack memory...

7.5CVSS6AI score0.00852EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
•added 2024/02/29 12:00 a.m.•32 views

CentOS 9 : gcc-toolset-13-binutils-2.40-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gcc-toolset-13-binutils-2.40-8.el9 build changelog. - GNU binutils gold gold v1.11-v1.16 GNU binutils v2.21-v2.31.1 is affected by: Improper Input Validation, Signed/Unsigned...

7.5CVSS6.6AI score0.024EPSS
SaveExploits2References5
OpenVAS
OpenVAS
•added 2023/10/30 12:00 a.m.•37 views

Mageia: Security Advisory (MGASA-2023-0303)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.02854EPSS
SaveExploits0References4
Amazon
Amazon
•added 2023/10/03 12:00 a.m.•22 views

Important: bind

Issue Overview: The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of availab...

7.5CVSS7AI score0.02854EPSS
SaveExploits0
Mend
Mend
•added 2023/09/20 12:32 p.m.•3 views

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

8.7CVSS0.02854EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/20 12:00 a.m.•3 views

CVE-2023-3341: Out-of-bounds Write

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS7.3AI score0.02854EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/01/26 2:53 p.m.•59 views

CVE-2021-46195

A flaw was discovered in the GNU libiberty library within the demanglepath function in rust-demangle.c, as distributed in the GNU Compiler Collection GCC. This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash...

5.5CVSS2.3AI score0.00779EPSS
SaveExploits1References3
Mend
Mend
•added 2021/06/02 2:31 p.m.•2 views

CVE-2021-3530

A flaw was discovered in GNU libiberty within demanglepath in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash...

8.7CVSS0.024EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2021/06/02 2:31 p.m.•62 views

CVE-2021-3530

A flaw was discovered in GNU libiberty within demanglepath in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash...

7.5AI score0.024EPSS
SaveExploits0References4
Rows per page
Query Builder