4404 matches found
CVE-2025-55182
影響を受けるバージョン コンポーネント| 再現推奨バージョン| 脆弱なバージョン範囲 ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS 以上 Next.js| 15.0.0| 15.x, 16.xApp Router React Core| 19.0.0 または 19.2.0| 19.0.0 から 19.2.0 まで RSC Bundler| react-server-dom-webpack| 19.0.0 から 19.2.0 まで ビルドと起動 1. 低バージョンを強制インストール cd cve-2025-55182-target npm instal...
CVE-2022-38181
このリポジトリには README がありません。...
CVE-2025-8571
CVE-2025-8571 CVE-2025-8571...
CVE-2022-42889
このリポジトリには README がありません。...
CVE-2026-73638
Imager versions from 0.4502 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiffloadifd. tiffloadifd validates an IFD entry's data by checking that entry-offset + entry-size stays within the EXIF block, and never checks the start offset itself. Where that sum is n...
DEBIAN-CVE-2026-77117
Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
CVE-2026-61907
A flaw was found in cyrus-imapd. An authenticated user with insert permissions on another user's snoozed mailbox could bypass access controls. This allows the user to insert mail into the target user's inbox or other known mailboxes, even without explicit insert permissions for those mailboxes...
SUSE CVE-2026-84447
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...
CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
MINI-GVJJ-8953-F4RH
Bulletin has no description...
MINI-85MV-5R7F-Q46R
Bulletin has no description...
MINI-GX2F-48J4-33MX
Bulletin has no description...
MINI-8XFF-V7C7-XCP4
Bulletin has no description...
MINI-P3VJ-WXPF-88MV
Bulletin has no description...
ECHO-48D4-6D76-5430
Bulletin has no description...
MINI-9843-VJ6J-WPM6
Bulletin has no description...