Known Vulnerabilities for Tools by Irfanview
Listed below are 10 of the newest known vulnerabilities associated with "Tools" by "Irfanview".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-129094 json | @utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopback se... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128239 json | GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers in src/... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127046 json | The MISP Modules website component contains an information disclosure vulnerability in the external tools management interfac... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-127016 json | The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configu... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-126776 json | SiYuan 3.7.0 before 3.8.10 on Windows contains a path traversal vulnerability in kernel/util/webfetch.go that allows attacker... | Not Provided | 2026-11-11 | 2026-11-12 |
| CVE-2026-126198 json | pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-126197 json | pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-126186 json | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record object... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-125397 json | NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-124028 json | mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool c... | Not Provided | 2026-11-06 | 2026-11-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Irfanview | Tools | 4.50 |