Search vulnerabilities

Expected end of text, found ':' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2026-105403

ImageMagick: ImageMagick: Security policy bypass via crafted image

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 6.2 Medium EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105402

ImageMagick: ImageMagick: Denial of Service via crafted XMP profile

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105401

ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in distributed pixel cache server

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105400

ImageMagick: ImageMagick: Denial of Service via crafted magick script

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 3.3 Low EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105399

ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105398

ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.1 Medium EPSS n/a KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2026-105275

Satel Netco Design Relative Path Traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files exist on the host system.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Satel
Products
Satel Netco Design
CVE-2026-104628

Satel Netco Design Inefficient Regular Expression Complexity

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Satel
Products
Satel Netco Design
CVE-2026-101024

Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Satel
Products
Satel Netco Design
CVE-2022-2849

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Vim
Products
Fedora Vim
CVE-2022-2845

Improper Validation of Specified Quantity in Input in vim/vim

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Vim
Products
Fedora Vim
CVE-2026-105922

vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service

A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Vllm Vllm-project
Products
Vllm Vllm
CVE-2026-57554

Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8031 Ar8031 Firmware Ar8035 and 434 more
CVE-2026-57545

Untrusted Pointer Dereference in Graphics

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8031 Ar8031 Firmware Cologne and 432 more
CVE-2026-25291

Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Cq8845s Cq8845s Firmware Cq8850ns and 224 more