OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements
CVE-2026-59181
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
#advisory
共收录 23421 条相关情报。
← 返回所有主题OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow
CVE-2026-59156
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
CVE-2026-59956
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
PPPD buffer overflow in PEAP response code
CVE-2026-75883
The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up t
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
CVE-2025-53837
XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) int
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
CVE-2026-93688
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstra
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
CVE-2026-93687
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attack
ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
CVE-2026-16515
net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rul
Out-of-bounds read in gPTP Announce path-trace validation via unvalidated stepsRemoved
CVE-2026-16514
gptp_mi_qualify_announce() in subsys/net/l2/ethernet/gptp/gptp_mi.c walks the Path Trace TLV of a received IEEE 802.1AS
Out-of-bounds read in the Zephyr gPTP receive path when handling short Ethernet frames
CVE-2026-16512
gptp_handle_msg() in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTP_HDR() and switched
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
CVE-2026-77929
ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c
SQLBot through 1.10.1 Improper Access Control via Dashboard Update
CVE-2026-93660
SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authe
Concrete CMS Community Store before 2.7.8 Stored XSS
CVE-2026-93659
Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and a
uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid
CVE-2026-93658
uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership
hickory-resolver before 0.26.2 DNSSEC Validation Bypass
CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and R
ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint
CVE-2026-77928
ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract
ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint
CVE-2026-77927
ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract
Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read
CVE-2026-93019
Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_pa
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p
CVE-2026-93018
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes pas
OpenCVE: Server-Side Request Forgery (SSRF) in notifications
CVE-2026-62282
OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack int