Lucene search
+L

616 matches found

AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•30 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap out-of-bounds read vulnerability in the coders/dcm.c module. When processing DICOM files with certain configurations, the decoder loop...

6.5CVSS6.5AI score0.004EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•18 views

Astra Linux – Vulnerability in GIMP

GIMP DCM File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

7.8CVSS7.9AI score0.0083EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1767025812)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767025812 advisory. - GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers...

7.8CVSS7.9AI score0.0083EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•12 views

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1767025812)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767025812 advisory. - GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...

7.8CVSS7.9AI score0.0083EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1765012494)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765012494 advisory. - GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...

7.8CVSS7.9AI score0.0083EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS7:CLSA-2026:1782214212)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1782214212 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a...

7.5CVSS6.7AI score0.0063EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/21 7:38 p.m.•18 views

EUVD-2026-84105

Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

8.4CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•9 views

CVE-2026-49811: Incorrect Permission Assignment for Critical Resource

Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

8.4CVSS5.8AI score0.00135EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/04 4:41 p.m.•42 views

CVE-2026-16693

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by a cryptographic weakness in Digital Certificate Manager (DCM) (5770-SS1 Option 34). The vulnerability stems from hardcoded cryptographic constants used to obfuscate encryption keys, classified as CWE-327 (Use of a Broken or Risky Cryptographic...

4.9CVSS6AI score0.0013EPSS
SaveExploits0References1Affected Software1
osv_jlsec
osv_jlsec
•added 2026/07/30 4:02 p.m.•22 views

JLSEC-2026-959 ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the coders/dcm.c module. When processing DICOM files with a specific configuration, the decoder loop incorrect...

6.5CVSS6.6AI score0.004EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•5 views

PT-2026-76066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched...

7.5CVSS6.7AI score0.0063EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2026/07/24 12:00 a.m.•17 views

ImageMagick Decoder DoS

The vulnerability of the DCM decoder in the console-based image editing tool ImageMagick is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS6.2AI score0.0063EPSS
SaveExploits0References6Affected Software3
osv_suse
osv_suse
•added 2026/07/15 9:49 a.m.•16 views

SUSE-SU-2026:3024-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...

9.2CVSS6AI score0.01934EPSS
SaveExploits4References56
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•17 views

TencentOS Server 2: gimp (TSSA-2025:1026)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1026 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

7.8CVSS7.9AI score0.0083EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/30 10:16 p.m.•28 views

CVE-2026-50003

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

9.8CVSS0.00664EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/06/30 9:14 p.m.•18 views

CVE-2026-50254 OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime

An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it...

8.7CVSS5.8AI score0.00646EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/29 12:00 a.m.•27 views

RHEL 7 : ImageMagick (RHSA-2026:32961)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:32961 advisory. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. Security Fixe...

9.2CVSS6.6AI score0.01934EPSS
SaveExploits4References20
osv_ghsa
osv_ghsa
•added 2026/06/25 9:52 p.m.•18 views

GHSA-8PJ9-6897-74XC ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operations...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/11 11:14 a.m.•25 views

SUSE CVE-2026-49218

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched...

5.5CVSS6.8AI score0.0063EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/06/11 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-49218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the...

7.5CVSS6.8AI score0.0063EPSS
SaveExploits0References2
Rows per page
Query Builder