ImageMagick before 7.1.2-30 Heap-use-after-free via Layer
CVE-2026-86425
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method
#advisory
共收录 23717 条相关情报。
← 返回所有主题ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race
CVE-2026-86424
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decod
ImageMagick before 7.1.2-30 Heap-use-after-free via GetList
CVE-2026-86423
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList metho
ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race
CVE-2026-86422
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows tha
ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers
ImageMagick before 7.1.2-30 Denial of Service Memory Budget
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCa
MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data
CVE-2026-86441
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i
MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs
CVE-2026-86440
Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The
MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery
CVE-2026-86419
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval an
MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users
CVE-2026-86418
Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa
MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users
CVE-2026-86417
Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T
MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events
CVE-2026-86408
Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe
XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import
CVE-2026-78325
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allow
CVE-2026-19204
CVE-2026-19204
A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to at
CVE-2026-85201
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-
MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL
CVE-2026-86351
Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with
CVE-2026-84173
CVE-2026-84173
In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates mul
MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion
CVE-2026-86347
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry
MISP Freetext Feed Preview Improper Authorization Exposes Restricted Event and Feed Information
CVE-2026-86342
Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview
Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow
CVE-2026-86289
A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/g