Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/26 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-116156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/10/26 12:00 a.m.•3 views

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/25 2:16 p.m.•3 views

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS0.00111EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/25 2:10 p.m.•5 views

CVE-2026-116156

A flaw was found in ImageMagick. Improper cleanup during the processing of the -set profile option can lead to a Denial of Service DoS caused by a memory leak. By convincing a user or automated workflow to process images with this option enabled, an attacker can exhaust system memory resources an...

4.8CVSS5.7AI score0.00111EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/25 1:20 p.m.•20 views

CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS0.00111EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/25 1:20 p.m.•5 views

EUVD-2026-109417

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/25 1:20 p.m.•6 views

CVE-2026-116156

ImageMagick versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a memory leak due to a missing cleanup mechanism when utilizing the -set profile option. A local attacker who can influence a user to process specifically crafted images may trigger this leak, potentially leading to...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•3 views

PT-2026-122997

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•15 views

PT-2026-103692

Name of the Vulnerable Software and Affected Versions Redux Framework versions prior to 4.5.15 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher...

4.3CVSS5.8AI score0.0033EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
•added 2025/10/10 6:20 a.m.•20 views

CVE-2025-7526

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion via renaming due to insufficient file path validation in the setuserprofileimage function in all versions up to, and including, 6.6.7. This makes it possible for...

9.8CVSS7.5AI score0.00915EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:08 a.m.•15 views

CVE-2023-21167

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6AI score0.00091EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•19 views

D-Link DAP-2622 security vulnerability

The D-Link DAP-2622 is a wireless access point Access Point device from China-based AUO D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set AG profile NMS URL...

8.8CVSS8.6AI score0.0108EPSS
SaveExploits0References3
Rows per page
Query Builder