RHEL 7 : imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick: NULL pointer dereference in GetMagickProperty function in MagickCore/property.c CVE-2018-163...

RHEL 6 : imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick: NULL pointer dereference in GetMagickProperty function in MagickCore/property.c CVE-2018-163...

RHEL 4 : imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ImageMagick: configuration files read from $CWD may allow arbitrary code execution CVE-2010-4167 Note that Nessus h...

Amazon Linux 2 : ImageMagick (ALAS-2024-2559)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2559 advisory. A flaw was found in ImageMagick, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined...

Low: ImageMagick

Issue Overview: A flaw was found in ImageMagick, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability...

Low: ImageMagick

Issue Overview: A flaw was found in ImageMagick, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability...

Exploit for Improper Input Validation in Imagemagick

CVE-2023-34152 RCE vulnerability affecting ImageMagick 6.9.6-4...

ImageMagick Sharpen Resized Images <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Description The ImageMagick Sharpen Resized Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2024-1696)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to...

WordPress ImageMagick Sharpen Resized Images Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software ImageMagick Sharpen Resized Images Type Theme Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34790 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4e86c697a717 Credits Cronus Required...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2024-1696)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OS Command Execution

fuel/core is vulnerable to OS Command Execution. The vulnerability is due to insufficient image filenames validation when constructing the ImageMagick command, which allows specially crafted filenames to be executed as operating system commands...

GHSA-26HP-CGJJ-M2J3 fuel/core ImageMagick driver does not escape all shell arguments.

This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver...

fuel/core ImageMagick driver does not escape all shell arguments.

This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver...

RHEL 5 : imagemagick,_graphicsmagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick, GraphicsMagick: Heap based buffer over-write in DescribeImage function of the...

RHEL 6 : graphicsmagick,_imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GraphicsMagick, ImageMagick: Memory exhaustion in ReadMPCImage in coders/mpc.c CVE-2017-12430 - The...

RHEL 7 : imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick: NULL pointer dereference in GetMagickProperty function in MagickCore/property.c CVE-2018-163...

RHEL 6 : imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick: use-after-free in MngInfoDiscardObject in coders/png.c CVE-2019-19952 - Heap-based buffer...

RHEL 7 : graphicsmagick,_imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GraphicsMagick, ImageMagick: Memory exhaustion in ReadMPCImage in coders/mpc.c CVE-2017-12430 - The...

RHEL 7 : imagemagick,_graphicsmagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick, GraphicsMagick: Heap based buffer over-write in DescribeImage function of the...