CVE Notifier

CVE-2026-67549 CWE-122 7.6

OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous cmyk tiff is exposed through a native uint1 …

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-86689 CWE-319 5.9

Cleartext Transmission of Sensitive Information in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

cve.org Bransys:ELD · Bransys:ELD 1 hari lalu

CVE-2026-63638 CWE-787 8.3

OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsuppo…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-10030 CWE-285 7.1

IBM MQ Console is vulnerable to privilege escalation

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks.

cve.org IBM:MQ 1 hari lalu

CVE-2026-63419 CWE-787 7.8

OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu

CVE-2026-10027 CWE-787 8.1

IBM MQ queue manager is vulnerable to unauthenticated remote code execution

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.

cve.org IBM:MQ 1 hari lalu

CVE-2026-93532 CWE-287 6.3

gedelumbung HospitalManagement Password Change password.php simpan improper authentication

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/app…

cve.org gedelumbung:HospitalManagement 1 hari lalu

CVE-2025-36421 CWE-319 5.9

Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

cve.org IBM:Controller 1 hari lalu

CVE-2026-86520 CWE-798 7.5

Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

cve.org Bransys:ELD · Bransys:ELD 1 hari lalu

CVE-2025-36178 CWE-1284 5.4

Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input of file size.

cve.org IBM:Controller 1 hari lalu

CVE-2025-36147 CWE-79 6.1

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript …

cve.org IBM:Financial · Transaction · Manager 1 hari lalu

CVE-2026-65970 CWE-825 5.3

OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enable…

cve.org AcademySoftwareFoundation:OpenImageIO 1 hari lalu