Tagged “vex”
CVEs tagged vex, newest first.
7401 CVEsRSS
CVE-2026-114102High· 7.5PoCadm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression (CVE-2026-114102)
A flaw was found in adm-zip. A remote, unauthenticated attacker could cause a Denial of Service (DoS) by submitting a malformed or corrupted ZIP archive to an application using asynchronous decompression. Because the library fails to prope…
CVE-2026-114109High· 8.8uv before 0.11.15 Arbitrary File Write via Entry Point Names
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a mal…
CVE-2026-111943Medium· 6.8PoCDistrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a de…
CVE-2026-113776High· 7.8virtualenv activation scripts run code from a path that contains a placeholder name
virtualenv activation scripts run code from a path that contains a placeholder name
CVE-2026-113732High· 7.8virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
CVE-2026-113726High· 7.8virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
CVE-2026-112894High· 7.5PoCPillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112390High· 7.5PoCPillow: Infinite loop in MIC n_frames when the embedded TIFF
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-112391Medium· 7.5Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112392High· 7.5PoCPillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112405High· 7.5PoCPillow: NULL pointer dereference in Image.merge via an unvalidated band 0
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112406High· 7.5Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
CVE-2026-112402High· 7.5PoCPillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-101609Medium· 4.4mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101608Medium· 6.5mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)
A flaw was found in the MySQL Server Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. A successful attack allows the attacker to cause the …
CVE-2026-101607Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability through multiple protocols to cause the service to hang or crash repeatedly. Successful expl…
CVE-2026-101612Medium· 4.0mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)
A flaw was found in the MySQL InnoDB component. A local, highly privileged attacker with access to the underlying infrastructure, requiring interaction from another user, can exploit this vulnerability to cause a hang or repeatable crash. …
CVE-2026-101611Medium· 4.4mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)
A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue results in a complete Denial o…
CVE-2026-101610Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)
A flaw was found in MySQL's Server Optimizer component. A remote attacker with high administrative privileges can exploit this vulnerability across network protocols to trigger a complete Denial of Service (DoS). Successful exploitation ca…
CVE-2026-101615Medium· 4.4Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.…
CVE-2026-101614Medium· 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.…
CVE-2026-101613Medium· 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL)
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.1…
CVE-2026-101618Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
A flaw was found in MySQL. A high-privileged remote attacker with network access can exploit this vulnerability in the InnoDB component to cause a Denial of Service (DoS). Successful exploitation allows the attacker to trigger a hang or re…
CVE-2026-101617Medium· 4.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB)
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.…
CVE-2026-101616Medium· 6.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.…
CVE-2026-101622Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101621Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
A flaw was found in the InnoDB component of MySQL. A high-privileged remote attacker with network access could exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in an unauthorized hang or repeatab…
CVE-2026-101619Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete …
CVE-2026-101624Medium· 4.9mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)
A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for …
CVE-2026-101623Medium· 4.9mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)
A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…