GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18308
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
2026-08-22 归档
今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18306
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18305
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-18304
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18303
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-18302
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a
Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
CVE-2026-18287
Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allo
Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
CVE-2026-18286
Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability al
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2026-18285
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability a
lxml: javascript: URL bypass in Cleaner via xlink:href
CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.def
EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution
CVE-2026-44725
EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. Prior to versions 5.8.11, 5.9.3,
TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway...
CVE-2026-54457
TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and e
Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw...
CVE-2026-63462
Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation e
A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauth...
CVE-2026-17252
A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone ove...
CVE-2026-77812
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encry
A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows unauthenticated remote attackers to modify NAT port‑forwarding rules via the UPnP...
CVE-2026-75501
A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows unauthenticated remote a
The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification matches the site's configured merchant account, allowing u...
CVE-2026-15150
The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification m
The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId). The enforceAccess midd...
CVE-2026-77769
The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned get
The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in packages/...
CVE-2026-77768
The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(repo