PT-2026-26912

Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the application by supplying an oversized input string. Attackers can trigger the vulnerability by pasting a crafted buffer exceeding 264 bytes int...

Pixarra Selfie Studio 缓冲区错误漏洞

Pixarra Selfie Studio is a photo shooting and beautification tool developed by the American company Pixarra. Version 2.17 of Pixarra Selfie Studio has a buffer overflow vulnerability. This vulnerability arises from the excessive length of the buffer entered during the image size adjustment...

Paradigma Valentina Studio 缓冲区错误漏洞

Paradigma Valentina Studio is a powerful general-purpose database management and data modeling tool developed by Paradigma Corporation. The Paradigma Valentina Studio 9.0.5 Linux version contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the Host field of th...

CVE-2019-25558: Out-of-bounds Write

Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a large string of characters into the New Width or New Height field to trigger a buffer...

PT-2026-26903

Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a large string of characters into the New Width or New Height field to trigger a buffer...

PT-2026-26901

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer...

CVE-2019-25556: Out-of-bounds Write

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer...

CVE-2019-25567: Out-of-bounds Write

Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the application by supplying an oversized input string. Attackers can trigger the vulnerability by pasting a crafted buffer exceeding 264 bytes int...

CVE-2019-25555: Incorrect Calculation of Buffer Size

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

CVE-2019-25557: Missing Release of File Descriptor or Handle after Effective Lifetime

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

de.codecentric:spring-boot-starter-batch-web (>=1.2.0.release, <=1.2.2.release), io.fabric8:process-spring-boot-container (>=1.2.0.beta1, <=1.2.0.beta3) +4 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.5.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - de.codecentric:spring-boot-starter-batch-web...

KLA90948 OSI vulnerability in Microsoft Copilot Studio

An information disclosure vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26136 Exploitation Related products Microsoft-Copilot-Studio CVE list...

CVE-2026-32638 StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.4, the REST API getUsers endpoint in StudioCMS uses the attacker-controlled rank query parameter to decide whether owner accounts should be filtered from the result set. As a result, an admin token...

GHSA-752W-5FWX-JX9F vulnerabilities

Vulnerabilities for packages: ggshield, vllm-openai-cuda-12.9, metaflow-service-fips, authentik-fips, pgadmin4-fips, kserve, datadog-agent-fips, dbt-snowflake, keep, airflow, authentik, py3-cassandra-medusa, open-webui, awx, datadog-agent, az, opal, superset, keep-fips, semgrep, label-studio,...

GHSA-3936-CMFR-PM3M vulnerabilities

Vulnerabilities for packages: nemo, label-studio, open-webui, kserve...

CVE-2026-32274 vulnerabilities

Vulnerabilities for packages: nemo, label-studio, open-webui, kserve...

CVE-2026-32597 vulnerabilities

Vulnerabilities for packages: ggshield, vllm-openai-cuda-12.9, metaflow-service-fips, authentik-fips, pgadmin4-fips, kserve, datadog-agent-fips, dbt-snowflake, keep, airflow, authentik, py3-cassandra-medusa, open-webui, awx, datadog-agent, az, opal, superset, keep-fips, semgrep, label-studio,...

Security Bulletin: PyArrow vulnerability affecting IBM Watson Studio in Cloud Pak for Data (CVE-2023-47248)

Summary PyArrow vulnerability in Runtimes 22.2 and Runtimes 23.1 components impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-47248 DESCRIPTION: Deserialization of untrusted data in IP...

RS Studio Lagom WHMCS Template 安全漏洞

RS Studio Lagom WHMCS Template is a website template and front-end theme developed by the Polish company RS Studio. The RS Studio Lagom WHMCS Template versions 2.3.7 and earlier contain security vulnerabilities. These vulnerabilities stem from improper manipulation of the Datatables component,...

CVE-2026-32732

CVE-2026-32732 describes an XSS issue in Lean 4 VS Code Extension caused by the @leanprover/unicode-input-component. The component re-inserted text into the input element as unescaped HTML, making versions 0.1.9 and earlier vulnerable. The issue affects projects using the affected component and c...