CVE-2026-105827

ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in CALS decoder

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105826

ImageMagick: ImageMagick: Denial of Service via MAT decoder policy bypass

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105825

ImageMagick: ImageMagick: Denial of Service via crafted XMP profile

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105824

ImageMagick: ImageMagick: Denial of Service via crafted SVG file in RSVG decoder

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.9 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105823

ImageMagick: ImageMagick: Security policy bypass via CUT encoder

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 4.0 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105405

ImageMagick: ImageMagick: Denial of Service via crafted MVG image

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.9 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105404

ImageMagick: ImageMagick: Code injection via PostScript coders

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105403

ImageMagick: ImageMagick: Security policy bypass via crafted image

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 6.2 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105402

ImageMagick: ImageMagick: Denial of Service via crafted XMP profile

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105401

ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in distributed pixel cache server

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105400

ImageMagick: ImageMagick: Denial of Service via crafted magick script

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 3.3 Low EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105399

ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105398

ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels

This CVE ID has been rejected as a duplicate.

CVSS 3.1 · 5.1 Medium EPSS n/a KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-105275

Satel Netco Design Relative Path Traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files exist on the host system.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Satel

Products

Satel Netco Design

CVE-2026-104628

Satel Netco Design Inefficient Regular Expression Complexity

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Satel

Products

Satel Netco Design

CVE-2026-101024

Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Satel

Products

Satel Netco Design

CVE-2022-2946

Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0246.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Vim

Products

Debian Linux Fedora Vim

CVE-2022-2849

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2022-2845

Improper Validation of Specified Quantity in Input in vim/vim

Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Vim

Products

Fedora Vim

CVE-2026-105922

vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service

A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Vllm Vllm-project

Products

Vllm Vllm