Lucene search
+L

37688 matches found

NVD
NVD
added 2026/02/24 1:16 a.m.19 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS0.00161EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/24 1:16 a.m.23 views

CVE-2025-9120

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS0.00158EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/24 1:01 a.m.10 views

Arbitrary Code Injection

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.9 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.9 views

Arbitrary Code Injection

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/24 1:01 a.m.6 views

CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6.1AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/24 1:01 a.m.56 views

CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS0.00161EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/24 1:01 a.m.3 views

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in PostScript header processing. An attacker can execute malicious code by submitting a file that is processed by a printer or viewer. Workaround This vulnerability can be mitigated by disabling the PostScript P...

5.7CVSS5.8AI score0.00161EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/02/24 1:01 a.m.12 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS5.9AI score0.00161EPSS
SaveExploits0
Snyk
Snyk
added 2026/02/24 1:01 a.m.12 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.10 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.10 views

Arbitrary Code Injection

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.10 views

Arbitrary Code Injection

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/24 1:01 a.m.4 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS7.1AI score0.00161EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/02/24 1:01 a.m.10 views

Arbitrary Code Injection

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.13 views

Arbitrary Code Injection

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:01 a.m.9 views

Arbitrary Code Injection

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

5.7CVSS6.2AI score0.00161EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/24 1:01 a.m.140 views

CVE-2026-25797

ImageMagick (affected: 7.1.2-15 and 6.9.13-40) contains two input-sanitization issues in the PostScript header written by the ps coders and in HTML escaping when writing to documents. The ps coders fail to sanitize input before inserting into the PostScript header, allowing an attacker to craft a...

5.7CVSS5.7AI score0.00161EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/24 12:03 a.m.33 views

CVE-2025-9120 RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS0.00158EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/24 12:03 a.m.12 views

EUVD-2025-207564

Improper Control of Generation of Code 'Code Injection' vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8....

8.6CVSS5.4AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder