44264 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-2967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP...
ImageMagick 安全漏洞
ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities, which were caused by integer overflows in the...
Linux Distros Unpatched Vulnerability : CVE-2025-61143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 Note that Nessus relies on the...
GHSA-QVHC-9V3J-5RFW vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21435 vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, kubo, spegel, ipfs-cluster, ipfs-cluster-fips, spegel-fips...
ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
A vulnerability for an integer overflow has been identified in the ImageMagick image processing software suite on 32-bit systems with non-default resource limits. An attacker can exploit this flaw by providing a specially crafted malicious image file BMP format for processing. Successful...
CVE-2026-2588: Integer Overflow or Wraparound
Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN sizet to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems sizet is typically 32-bits while an unsigned long long is at least 64-bi...
Crypt::NaCl::Sodium 安全漏洞
Crypt::NaCl::Sodium is an encryption/decryption library open source by CPAN authors. Versions of Crypt::NaCl::Sodium 2.001 and earlier have security vulnerabilities, which stem from integer overflow defects on 32-bit systems...
CVE-2026-2588
The Crypt::NaCl::Sodium library for Perl, versions through 2.001 , is vulnerable to an integer overflow flaw on 32-bit systems. The root cause resides in the Sodium.xs component, which incorrectly casts a STRLEN (size_t) to an unsigned long long when passing a length pointer to libsodium function...
CVE-2026-27199
Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...
GHSA-69X3-G4R3-P962 vulnerabilities
Vulnerabilities for packages: caddy, step-ca, step, step-issuer...
CVE-2026-26721
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...
CVE-2026-26724
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint...
CVE-2025-8055
Server-Side Request Forgery SSRF vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: kayenta, ontop, nacos, thingsboard, kayenta-fips, ontop-fips, nacos-docker...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: kayenta, ontop, nacos, thingsboard, kayenta-fips, ontop-fips, nacos-docker...
Linux Distros Unpatched Vulnerability : CVE-2026-2492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate...
ssm-erp和production_ssm 授权问题漏洞
productionssm is an ERP system developed by MegaGao’s individual developers using Spring+SpringMVC+Mybatis and jQuery EasyUI. ssm-erp is a production management ERP system developed by fenghaha’s individual developers. There are authorization issues between ssm-erp and productionssm...