Lucene search
+L

404526 matches found

CVE
CVE
•added 2026/09/18 1:20 p.m.•19 views

CVE-2026-93590

ImageMagick versions before 7.1.2-31 are affected by a policy bypass in the UHDR encoder . The root cause is a failure to perform policy checks during buffer allocation for image pixels, allowing an attacker to bypass configured resource policies by processing a specially crafted UHDR image . The...

6.3CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 1:20 p.m.•30 views

CVE-2026-93588

ImageMagick before 7.1.2-31 and before 6.9.13-56 is affected by a NULL pointer dereference in the PNM coder . When the coder reaches a memory resource limit at a specific point during processing, the failed allocation is not handled, causing a NULL pointer dereference. This leads to a denial of s...

3.1CVSS5.5AI score0.00315EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 1:20 p.m.•24 views

CVE-2026-93586

ImageMagick versions prior to 7.1.2-31 and 6.9.13-56 contain a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. The impact is limited to availability—exploit may cause a crash of the affected process , with no stated confidentiality or in...

2.9CVSS5.8AI score0.00139EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 1:20 p.m.•22 views

CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (also affecting CUBE and HALD) coder. When a specific command-line option is supplied, the decoder fails to enforce a configured resource limit, resulting in excessive memory allocation . A local user able to pas...

4.8CVSS5.6AI score0.00146EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 1:19 p.m.•29 views

CVE-2023-5778

CVE-2023-5778 is an improper handling of length parameter inconsistency vulnerability affecting ABB Freelance Controller DCP, AC700, AC800, and AC900 , all through firmware version 2019 SP1 . The flaw allows a network-based, low-complexity attack with no required privileges or user interaction to...

9.2CVSS5.8AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 1:15 p.m.•20 views

CVE-2026-93504

SveltyCMS 0.0.6 is affected by an improper access control flaw in the User Attribute Update Endpoint (file src/routes/api/[...path]/+server.ts). The vulnerability is exploitable over the network with low privileges and no user interaction, resulting in low impact to confidentiality, integrity, an...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/18 12:49 p.m.•26 views

CVE-2026-93492

CVE-2026-93492 affects the HpackEncoder in Netty's netty-codec-http2 module. A remote, unauthenticated attacker can trigger a Denial of Service by sending HTTP/2 SETTINGS frames containing a very large MAX_HEADER_TABLE_SIZE , causing the encoder to store an excessive number of unique headers and ...

5.3CVSS5.8AI score0.00644EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/18 12:43 p.m.•49 views

CVE-2026-93491

Netty 's HttpServerCodec (io.netty/netty-codec-http) is vulnerable to a denial-of-service via unbounded memory consumption. A remote, unauthenticated attacker can pipelining HTTP/1.1 requests on a single connection and withholding reads, causing the methodOverflowQueue to grow without limit and e...

7.5CVSS5.8AI score0.00867EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/18 11:47 a.m.•55 views

CVE-2026-93488

CVE-2026-93488 affects Netty's SpdySessionHandler in the io.netty/netty-codec-http component. The handler's localConcurrentStreams field defaults to Integer.MAX_VALUE with no public API to modify it, allowing a remote peer to open a SPDY connection and send a large number of SYN_STREAM frames wit...

7.5CVSS5.8AI score0.007EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/18 11:19 a.m.•23 views

CVE-2026-28199

CVE-2026-28199 affects NetBackup Flex OS , where an authenticated user with access to the management shell can supply a specially crafted path argument to a diagnostic command, enabling relative path traversal to read arbitrary files from the underlying operating system. Successful exploitation m...

4.8CVSS5.9AI score0.00099EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 11:12 a.m.•22 views

CVE-2026-21806

HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application permits multiple simultaneous authenticated sessions for the same administrative account, which could allow an attacker to predict or hijack valid session identifiers . Successful exp...

3.1CVSS6AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 11:12 a.m.•20 views

CVE-2026-28198

CVE-2026-28198 affects NetBackup Flex OS (Cohesity), specifically its management shell. An authenticated, low-privileged user can bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation yields ...

9.4CVSS5.9AI score0.0034EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 11:07 a.m.•30 views

CVE-2026-28197

CVE-2026-28197 is a privilege escalation vulnerability in NetBackup Flex OS (Cohesity), where an authenticated, low-privileged user with access to the management shell can supply a specially crafted input to a privileged administrative command, achieving arbitrary code execution with root-level p...

9.4CVSS6.6AI score0.00666EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 10:58 a.m.•41 views

CVE-2026-93563

CVE-2026-93563 affects Netty's netty-codec-smtp component, specifically the SmtpResponseDecoder class. The root cause is unbounded multi-line response accumulation , which allows a remote attacker to trigger a memory-exhaustion denial of service over the network without authentication or user int...

7.5CVSS5.7AI score0.00557EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 10:54 a.m.•34 views

CVE-2026-81627

A flaw in QEMU 's VAPIC setup hypercall (hw/i386/vapic.c) fails to validate that the writable RAM alias stays within the option ROM window. A privileged guest on a Q35/KVM machine can position this alias over locked SMRAM , bypassing chipset D_LCK protection and injecting code into System Managem...

8.2CVSS5.7AI score0.00192EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/18 10:53 a.m.•24 views

CVE-2026-93578

CVE-2026-93578 affects the Netty library, specifically the netty-handler-ssl-ocsp module. The vulnerability stems from a missing Extended Key Usage (EKU) check in the OCSP client, which allows an attacker to perform a certificate revocation bypass . An OCSP response signed with a certificate lack...

5.9CVSS5.8AI score0.00293EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 10:53 a.m.•34 views

CVE-2026-93572

CVE-2026-93572 affects RedisArrayAggregator in io.netty/netty-codec-redis . The component checks maxElements and maxNestedArrayDepth limits independently, but the allocator remains eager: every nested RESP array header creates new ArrayList(length) before any child element exists. With the defaul...

7.5CVSS5.9AI score0.00582EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 10:53 a.m.•32 views

CVE-2026-93575

CVE-2026-93575 is an incomplete fix for CVE-2026-44248 in Netty's MQTT codec (io.netty.handler.codec.mqtt.MqttDecoder). The decoder validates the packet's Remaining Length against maxBytesInMessage but fails to validate the Properties Length against it. An unauthenticated remote attacker can send...

7.5CVSS5.8AI score0.00664EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 10:02 a.m.•42 views

CVE-2026-93561

This vulnerability affects the netty-codec-memcache component of the Netty project. A signed/unsigned type mismatch in the Memcache binary codec can cause frame desynchronization , potentially enabling response smuggling . Red Hat rates it CVSS 6.5 (Medium) — network-exploitable with low complexi...

6.5CVSS5.7AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 9:57 a.m.•24 views

CVE-2026-92976

A stored XSS vulnerability affects the profile management functionality of T-Systems' TAO 2.0 suite. An authenticated user can inject malicious HTML or JavaScript into personal data fields, which are stored and rendered without proper sanitisation when viewed by another user, including administra...

5.1CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Rows per page
Query Builder