ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
CVE-2026-46559
An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options.
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题ImageMagick: Stack overflow in fx operation
CVE-2026-46557
Due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument.
ImageMagick: Use-After-Free in MSL decoder.
CVE-2026-46523
A crafted MSL image can trigger a heap-use-after-free.
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
CVE-2026-46521
When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.
ImageMagick: Policy Bypass in MNG coder could
CVE-2026-45664
Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would al
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
CVE-2026-45624
When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume
NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes
CVE-2026-45554
### Summary Two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may r
OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers
CVE-2026-45684
### Summary OBI's log enricher mishandles `writev` buffers by reading only the first `iovec` entry but using the total
OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals
CVE-2026-45682
### Summary The custom `CappedConcurrentHashMap` introduced for Java TLS state tracking never removes keys from its ins
OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size
CVE-2026-45681
### Summary The per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload s
OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU
CVE-2026-45680
### Summary OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy syst
ws: Uninitialized memory disclosure
CVE-2026-45736
### Impact The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray`
AVideo: Authenticated Arbitrary File Read in view/update.php
CVE-2026-45731
### Summary view/update.php reads $_POST['updateFile'] as a relative path under updatedb/ and passes it to PHP's file()
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45494
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-45492
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security featur
HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap...
CVE-2026-29964
HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to impro
An attacker in a privileged network position may be able to leak sensitive information. A path...
CVE-2026-20685
An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addres
NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the...
CVE-2026-32849
NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/op
HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police...
CVE-2026-29965
HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to
OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format...
CVE-2026-38719
OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specific