Lucene search
+L

4090 matches found

AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•7 views

Astra Linux – Vulnerability in imagemagick

A vulnerability was discovered in ImageMagick. This security flaw manifests as undefined behaviors when using double to type as sizet in svg, mvg, and other code segments reoccurring bugs of CVE-2022-32546...

5.5CVSS6.6AI score0.00955EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2025/01/29 3:52 a.m.•9 views

SUSE CVE-2024-56515

Matrix Media Repo MMR is a highly configurable multi-homeserver media repository for Matrix. If SVG or JPEGXL thumbnailers are enabled they are disabled by default, a user may upload a file which claims to be either of these types and request a thumbnail to invoke a different decoder in...

6.5CVSS6.8AI score0.00641EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•15 views

PT-2025-3302 · Unknown +2 · Matrix Media Repo +4

Name of the Vulnerable Software and Affected Versions: Matrix Media Repo versions prior to 1.3.8 Description: The issue arises when SVG or JPEGXL thumbnailers are enabled, allowing a user to upload a file that claims to be one of these types and request a thumbnail, potentially invoking a differe...

8.9CVSS6.4AI score0.0107EPSS
SaveExploits2References90
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•19 views

matrix-media-repo 代码问题漏洞

matrix-media-repo is a highly configurable multi-domain media repository for Matrix in the t2bot.io open source. A code issue vulnerability exists in matrix-media-repo that stems from the fact that if Matrix Media Repo has SVG or JPEGXL thumbnails enabled, a user can upload files claiming to be o...

6.8CVSS6.9AI score0.00641EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•5 views

PT-2025-54197

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-12 Description ImageMagick is software used for editing and manipulating digital images. Prior to version 7.1.2-12, reading a malicious SVG file with Magick could lead to a denial-of-service DoS attack...

7.5CVSS6.4AI score0.00647EPSS
SaveExploits1References72
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•5 views

PT-2025-54204

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-12 Description ImageMagick, software used for editing and manipulating digital images, contains a flaw where it does not properly check for circular references between two MVGs. This can lead to a stack...

6.2CVSS6.5AI score0.00188EPSS
SaveExploits0References69
OSV
OSV
•added 2024/12/17 11:47 a.m.•5 views

USN-7164-1 imagemagick vulnerability

It was discovered that ImageMagick incorrectly handled certain malformed files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly exploit this to cause a denial of service...

5.5CVSS6.8AI score0.01121EPSS
SaveExploits0References4
OSV
OSV
•added 2024/11/18 7:09 p.m.•14 views

CLSA-2024-1731956942 Fix CVE(s): CVE-2020-25666, CVE-2020-27764, CVE-2020-27776

SECURITY UPDATE: Undefined behavior in the form of values outside the range of type unsigned long - debian/patches/CVE-2020-27764-and-CVE-2020-27776.patch: Fix outside the range of representable values of type unsigned long - CVE-2020-27764 - CVE-2020-27776 SECURITY UPDATE: Integer overflow in...

4.3CVSS6.8AI score0.01177EPSS
SaveExploits2References1
OSV
OSV
•added 2024/11/18 7:07 p.m.•19 views

CLSA-2024-1731956848 ImageMagick: Fix of 3 CVEs

CVE-2020-27751: fix shift exponent that is too large for 64-bit type at magick/quantum-export.c - CVE-2020-27757: fix outside the range of representable values of type 'unsigned long long' bug at magick/quantum-private.h - CVE-2020-27768: fix outside the range of representable values of type...

4.3CVSS6.8AI score0.01411EPSS
SaveExploits2References1
OSV
OSV
•added 2024/10/15 8:18 a.m.•23 views

USN-7068-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into processing a specially crafted file, an attacker could exploit this to cause a denial of service or affect the reliability of the system. The...

8.8CVSS6.9AI score0.05916EPSS
SaveExploits24References34
OSV
OSV
•added 2024/08/22 5:20 p.m.•30 views

USN-6980-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...

8.8CVSS6.8AI score0.04479EPSS
SaveExploits7References11
Positive Technologies
Positive Technologies
•added 2024/07/29 12:00 a.m.•3 views

PT-2024-29583

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.11-36 Description The issue arises when the AppImage version of ImageMagick sets the MAGICK CONFIGURE PATH and LD LIBRARY PATH environment variables to an empty path during execution. This could potentially lead...

7.8CVSS0.00934EPSS
SaveExploits2References13
BDU FSTEC
BDU FSTEC
•added 2024/06/28 12:00 a.m.•20 views

The vulnerability of the ReadTIFFImage() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadTIFFImage function in the ImageMagick console graphics editor is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.02762EPSS
SaveExploits0References5Affected Software3
Patchstack
Patchstack
•added 2024/05/17 1:29 p.m.•10 views

WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Theme ImageMagick Sharpen Resized Images versions = 1.1.7...

5.9CVSS6AI score0.00259EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/12 12:00 a.m.•15 views

The vulnerability of the Magick::Draw function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the Magick::Draw function in the console-based image editing tool ImageMagick is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS5.7AI score0.00352EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/03/11 12:00 a.m.•14 views

The vulnerability of the ruby-magick interface between Ruby and the ImageMagick library, related to memory leak errors, allows attackers to trigger a denial-of-service attack.

The vulnerability of the ruby-magick interface between Ruby and the ImageMagick library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5.3CVSS5.8AI score0.00669EPSS
SaveExploits1References6Affected Software3
Amazon
Amazon
•added 2024/01/22 12:00 a.m.•20 views

Important: ImageMagick

Issue Overview: Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable. CVE-2016-5841 ImageMagick 7.0.7-12 Q16, a CPU exhaustion...

9.8CVSS7.3AI score0.13393EPSS
SaveExploits53
OSV
OSV
•added 2023/10/30 9:33 p.m.•21 views

GHSA-FRGF-8JR5-J2JV memory leak flaw was found in ruby-magick

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS4.2AI score0.00669EPSS
SaveExploits1References13
Github Security Blog
Github Security Blog
•added 2023/10/30 9:33 p.m.•24 views

memory leak flaw was found in ruby-magick

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

5.3CVSS5.1AI score0.00669EPSS
SaveExploits1References12Affected Software1
OSV
OSV
•added 2023/10/30 9:15 p.m.•4 views

DEBIAN-CVE-2023-5349

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service DOS by memory exhaustion...

3.3CVSS5.1AI score0.00669EPSS
SaveExploits1References1
Rows per page
Query Builder