Lucene search
+L

22 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•18 views

ImageMagick < 6.9.13-47 / 7.x < 7.1.2-22 Information Disclosure

The remote host has a version of ImageMagick installed that is prior to 6.9.13-47, or 7.x prior to 7.1.2-22. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-22 and before 6.9.13-47 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References2
osv_jlsec
osv_jlsec
•added 2026/07/30 4:02 p.m.•31 views

JLSEC-2026-1050 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the...

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-76090

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/02 6:35 a.m.•21 views

SUSE CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/01 12:34 a.m.•31 views

EUVD-2026-40449

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/06/30 11:17 p.m.•27 views

DEBIAN-CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/06/30 11:17 p.m.•21 views

UBUNTU-CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/30 10:08 p.m.•71 views

CVE-2026-56369

CVE-2026-56369 concerns ImageMagick prior to 7.1.2-22, where an information-disclosure vulnerability arises in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers could potentially recover plaintext from encrypted images because the nonce is reused in the CTR mode. The available...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/06/30 10:08 p.m.•20 views

CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/06/30 10:08 p.m.•16 views

CVE-2026-56369 ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References2
Mend
Mend
•added 2026/06/30 10:08 p.m.•4 views

CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.2AI score0.0023EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•8 views

CVE-2026-56369: Reusing a Nonce, Key Pair in Encryption

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•7 views

CVE-2026-56369: Reusing a Nonce, Key Pair in Encryption

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•6 views

CVE-2026-56369: Reusing a Nonce, Key Pair in Encryption

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.3AI score0.0023EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2026/05/21 9:49 p.m.•26 views

GHSA-QV2Q-C278-PCH5 ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

3.7CVSS5.2AI score0.0023EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•30 views

Insecure Randomness

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.1AI score0.0023EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/21 9:49 p.m.•39 views

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

5.8AI score
SaveExploits0References3Affected Software17
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•32 views

Insecure Randomness

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.1AI score0.0023EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•46 views

Insecure Randomness

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS5.1AI score0.0023EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•30 views

Insecure Randomness

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.1AI score0.0023EPSS
SaveExploits0References3
Rows per page
Query Builder