CVE Security

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares mor...

Applications


                                    CVE-2026-41071

Lire l'article

medium 4.6

29/05/2026

Vulnérabilité medium détectée - CVE-2026-41073

RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet (CSV/f...

Applications


                                    CVE-2026-41073

Lire l'article

high 7.1

29/05/2026

Vulnérabilité high détectée - CVE-2026-41074

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vuln...

Web


                                    CVE-2026-41074

Lire l'article

unknown

29/05/2026

Vulnérabilité unknown détectée - CVE-2026-40598

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page (retrieved from...

Applications


                                    CVE-2026-40598

Lire l'article

unknown

29/05/2026

Vulnérabilité unknown détectée - CVE-2026-40607

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerability is caused by incorrect es...

Web


                                    CVE-2026-40607

Lire l'article

medium 5.5

29/05/2026

Vulnérabilité medium détectée - CVE-2026-40610

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build pac...

Applications


                                    CVE-2026-40610

Lire l'article

high 8.2

29/05/2026

Vulnérabilité high détectée - CVE-2026-5817

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs w...

Applications iOS


                                    CVE-2026-5817

Lire l'article

high 8.1

29/05/2026

Vulnérabilité high détectée - CVE-2026-40172

authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, the PATCH /api/v3/core/users/{pk}/ AP...

Applications


                                    CVE-2026-40172

Lire l'article

unknown

29/05/2026

Vulnérabilité unknown détectée - CVE-2026-48700

An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI in an org.freedesktop.FileMan...

Applications


                                    CVE-2026-48700

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mo...

Applications


                                    CVE-2026-6406

Lire l'article

high 7.1

29/05/2026

Vulnérabilité high détectée - CVE-2026-9291

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 ...

Applications


                                    CVE-2026-9291

Lire l'article

low 3.3

29/05/2026

Vulnérabilité low détectée - CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-b...

Applications


                                    CVE-2026-39824

Lire l'article

14 15 16 17 18