ImageMagick has an Infinite Loop in subimage-search with crafted image
CVE-2026-48733
An infinite loop in the subimage-search operation can happen when using a crafted image.
2026-06-26 归档
今日共收录 1370 条安全情报，包含 648 个 CVE，378 篇安全通告，以及 115 篇研究论文。
← 返回归档列表ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
CVE-2026-48724
When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write.
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
CVE-2026-48702
## Description The `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompresses the signature and control g
Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1...
CVE-2026-6412
Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate proce
A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not...
CVE-2026-6450
A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allow
Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to...
CVE-2026-6678
Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handlin
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting...
CVE-2026-6679
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. T
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A...
CVE-2026-6731
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers...
CVE-2026-38637
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S
The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing...
CVE-2026-6681
The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the...
CVE-2026-55958
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding th
Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing...
CVE-2026-55960
Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw pub
Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any...
CVE-2026-57521
Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to ac
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
[原创]探索CVE-2026-31431的热补丁修复方案
CVE-2026-31431
[原创]探索CVE-2026-31431的热补丁修复方案
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto