Lucene search
+L

3963 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/01 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-56369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploi...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References2
Redos
Redos
•added 2026/07/01 12:00 a.m.•14 views

ROS-20260701-73-0061

The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2CVSS5.8AI score0.00188EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•31 views

PT-2026-54856

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 Description Incorrect handling of arguments in the JP2 encoder can lead to a heap buffer over-write. A heap buffer over-write occurs when a program writes more data to a heap-allocated memory buffer than ...

9.2CVSS6.5AI score0.01643EPSS
SaveExploits0References129
NVD
NVD
•added 2026/06/30 11:17 p.m.•18 views

CVE-2026-56361

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS0.00128EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/30 11:17 p.m.•11 views

DEBIAN-CVE-2026-56377

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/30 11:17 p.m.•12 views

DEBIAN-CVE-2026-56365

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service...

5.3CVSS5.6AI score0.00284EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•15 views

CVE-2026-56377

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/30 11:17 p.m.•14 views

UBUNTU-CVE-2026-56377

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•18 views

CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•18 views

CVE-2026-56361

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS7.2AI score0.00128EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•18 views

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

1.9CVSS6.1AI score0.00154EPSS
SaveExploits1References4
OSV
OSV
•added 2026/06/30 11:17 p.m.•14 views

UBUNTU-CVE-2026-56363

ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing integer overflow, resulting in division by zero and application crash...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/06/30 11:16 p.m.•14 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

4.8CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/30 11:16 p.m.•15 views

Directory Traversal

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/30 11:16 p.m.•13 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

4.8CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/30 11:16 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

4.8CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/30 11:16 p.m.•14 views

Directory Traversal

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/30 10:08 p.m.•37 views

CVE-2026-56377

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/06/30 10:08 p.m.•14 views

CVE-2026-56377 ImageMagick - Policy Bypass via Incorrect Path Validation

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS5.5AI score0.00164EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/30 10:08 p.m.•13 views

CVE-2026-56377 ImageMagick - Policy Bypass via Incorrect Path Validation

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

4.8CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder