Lucene search
+L

55821 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/14 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-40183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write...

5.5CVSS5.9AI score0.00198EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•21 views

PT-2026-54044

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A memory leak exists in the PNG encoder when writing MNG images. An attacker can trigger an encoder failure condition to exhaust memory resources, resulting in a denial of service...

7.5CVSS6AI score0.01934EPSS
SaveExploits4References114
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•20 views

Podman 操作系统命令注入漏洞

Podman is an open-source engine developed by Podman for developing, managing, and running OCI containers on Linux systems. Versions of Podman 4.8.0 to 5.8.1 contain a vulnerability related to operating system command injection. This vulnerability stems from command injection issues in the HyperV...

7.8CVSS6.1AI score0.00679EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•24 views

Unisys WebPerfect Image Suite 安全漏洞

Unisys WebPerfect Image Suite is an enterprise document imaging and management system developed by Unisys, Inc. Both versions of Unisys WebPerfect Image Suite 3.0.3960.22810 and 3.0.3960.22604 contain security vulnerabilities. These vulnerabilities stem from unvalidated WCF SOAP endpoints located...

10CVSS5.8AI score0.00992EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-39907: External Control of File Name or Path

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...

10CVSS5.6AI score0.00992EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/04/14 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-40312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decode...

6.2CVSS5.8AI score0.00177EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/04/13 11:26 p.m.•16 views

SUSE CVE-2026-34757

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

5.1CVSS6AI score0.00163EPSS
SaveExploits1References14
Snyk
Snyk
•added 2026/04/13 11:08 p.m.•15 views

Off-by-one Error

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:08 p.m.•14 views

Off-by-one Error

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•17 views

Use After Free

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.8AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.8AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•9 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the XMP profile handling process. An attacker can cause a crash by providing a specially crafted image file that triggers the reading and printing of values from an invalid XMP profile. Remediation A fix was pushed int...

6.8CVSS5.8AI score0.00184EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 11:06 p.m.•15 views

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.8AI score0.00184EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•9 views

CVE-2026-40311

A flaw was found in ImageMagick. This heap use-after-free vulnerability can be triggered when processing an invalid XMP Extensible Metadata Platform profile. An attacker could craft a malicious image file that, when read and processed by ImageMagick, may lead to a crash, resulting in a denial of...

5.5CVSS5.7AI score0.00184EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•11 views

CVE-2026-40310

A flaw was found in ImageMagick. This vulnerability, a heap out-of-bounds write, occurs within the JPEG 2000 JP2 encoder when processing an image with an invalid sampling index. A remote attacker could exploit this by providing a specially crafted image, which may lead to a denial of service DoS ...

6.5CVSS5.8AI score0.00189EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•11 views

CVE-2026-40183

A flaw was found in ImageMagick, a software for editing and manipulating digital images. When a user processes an image with the JXL encoder and specifies that it should be encoded as 16-bit floats, a heap write overflow occurs. This vulnerability could allow an attacker to cause a denial of...

5.5CVSS5.7AI score0.00198EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•15 views

CVE-2026-40169

A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by providing a specially crafted image file. When ImageMagick processes this image to generate a YAML or JSON output, it can lead to an out-of-bounds heap write, causing the application to crash. This results in a...

6.5CVSS5.7AI score0.0019EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•10 views

CVE-2026-33905

A flaw was found in ImageMagick. This vulnerability allows a local user to cause a denial of service DoS by providing a specially crafted image that exploits an out-of-bounds read during the -sample operation when a specific offset is set through the sample:offset define. This can lead to...

7.1CVSS5.7AI score0.00201EPSS
SaveExploits0References7
OSV
OSV
•added 2026/04/13 10:16 p.m.•9 views

DEBIAN-CVE-2026-40169

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. This issue has been fixed in version 7.1.2-19...

5.5CVSS5.2AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/13 10:16 p.m.•11 views

DEBIAN-CVE-2026-40183

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the image should be encoded as 16 bit floats. This issue has been fixed in version 7.1.2-19...

5.5CVSS5.3AI score0.00198EPSS
SaveExploits0References1
Rows per page
Query Builder