VulDB Recent Entries

A vulnerability described as very critical has been identified in IBM Storage TS4500 Library up to 1.12.0.3. This impacts an unknown function. The manipulation results in session expiration. This vulnerability is cataloged as CVE-2025-36069. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as very critical has been reported in IBM Storage TS4500 Library up to 1.12.0.3. This affects an unknown function. The manipulation leads to race condition. This vulnerability is listed as CVE-2026-19178. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in Zephyr Project Zephyr up to 4.4.2. The impacted element is the function z_vrfy_rtio_cqe_get_mempool_buffer of the file subsys/rtio/rtio_syscalls.c of the component Syscall Verifier. Executing a manipulation of the argument buff/buff_len can lead to permission issues. This vulnerability is tracked as CVE-2026-19595. The attack is restricted to local execution. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability identified as very critical has been detected in IBM Storage TS4500 Library up to 1.12.0.3. The affected element is an unknown function. Performing a manipulation results in session expiration. This vulnerability is identified as CVE-2025-36252. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in IBM Storage TS4500 Library up to 1.12.0.3. Impacted is an unknown function of the component SMTP Handler. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-36061. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in TP-Link Tapo C210 3.60. It has been rated as problematic. This issue affects some unknown processing of the component DS JSON API. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-105815. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in TP-Link Tapo C210 3.60. It has been declared as very critical. This vulnerability affects unknown code of the component DS JSON API. The manipulation results in improper authorization. This vulnerability was named CVE-2026-105814. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in python-pillow Pillow up to 12.x. It has been classified as problematic. This affects the function ImagingExpand of the component Rank-based filters. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-112392. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in python-pillow Pillow up to 12.x and classified as problematic. Affected by this issue is the function Image.open of the component APNG Handler. Executing a manipulation can lead to allocation of resources. This vulnerability is handled as CVE-2026-112399. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Pillow up to 12.x and classified as problematic. Affected by this vulnerability is the function Image.merge of the component IPTC file Handler. Performing a manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-112405. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Pillow up to 12.x. Affected is the function GifImageFile._seek of the component Gif Comment Parsing. Such manipulation leads to resource consumption. This vulnerability is traded as CVE-2026-112401. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in python-pillow Pillow up to 12.x. This impacts the function ImagingScaleAffine of the component Transform. This manipulation causes double free. This vulnerability appears as CVE-2026-112402. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Pillow up to 12.x. This affects the function GifImageFile._seek of the component Gif Handler. The manipulation results in resource consumption. This vulnerability is reported as CVE-2026-112400. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in python-pillow Pillow up to 12.x. The impacted element is the function ImagingJpegDecode of the component JPEG decoder. The manipulation leads to buffer overflow. This vulnerability is documented as CVE-2026-112403. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in python-pillow Pillow up to 12.x. The affected element is the function ImageMorph.MorphOp.apply of the component Morphology. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026-112397. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Python Pillow Pillow up to 12.x. Impacted is the function ImagingJpegDecode of the component FlashPix JPEG-tile decoder. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2026-112398. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in python-pillow Pillow up to 12.99.99. This issue affects the function _decodeTile of the component TIFF Decode. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-112404. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Pillow up to 12.x. This vulnerability affects the function ImagingLibTiffEncode of the component LibTIFF Encoding. This manipulation causes use after free. This vulnerability is tracked as CVE-2026-112396. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in MISP Modules up to 3.0.12. This affects the function is_safe_url of the component html_to_markdown. The manipulation results in server-side request forgery. This vulnerability is identified as CVE-2026-112991. The attack can be executed remotely. There is not any exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability was found in python-pillow Pillow 11.3.0/12.1.1/12.3.0. It has been rated as problematic. Affected by this issue is the function ImagingPaletteCacheUpdate of the component Palette Cache. The manipulation leads to uninitialized resource. This vulnerability is referenced as CVE-2026-112898. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.