413138 matches found
CVE-2026-112399
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OPPREVIO...
CVE-2026-112398
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix FPX JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCSUNKNOWN with four...
CVE-2026-112401
Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...
CVE-2026-112404
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently,...
CVE-2026-112402
Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling...
CVE-2026-112403
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...
CVE-2026-112400
Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile.seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and...
CVE-2026-112358
A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function getimgfromurl of the file ApiBillet/serializers.py of the component APIv1. Executing a manipulation of the argument imgurl/imageurl can lead to server-side...
CVE-2026-112396
Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in...
CVE-2026-112360
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of...
CVE-2026-112361
A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads to protection mechanism failure. The attack can be executed remotely. Upgrading to version 24.0.0 is sufficient to...
CVE-2026-112397
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...
CVE-2026-112392
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...
CVE-2026-112258
A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code...
CVE-2026-112261
A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution...
CVE-2026-112257
A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...
CVE-2026-105815
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated...
CVE-2026-105814
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...
CVE-2024-54649
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54648
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54650
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54651
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54655
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54656
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54646
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54647
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54652
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54653
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54654
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54657
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54629
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54631
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54630
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54634
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54633
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54637
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54638
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54639
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54641
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54643
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54644
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54645
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54628
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54632
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54635
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54636
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54640
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...
CVE-2024-54642
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues...