Lucene search
+L

15 matches found

OSV
OSV
•added 2026/07/30 4:02 p.m.•10 views

JLSEC-2026-1050 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the...

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/07/02 6:35 a.m.•12 views

SUSE CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/01 12:34 a.m.•26 views

EUVD-2026-40449

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/30 11:17 p.m.•24 views

DEBIAN-CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/30 11:17 p.m.•14 views

UBUNTU-CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/30 10:08 p.m.•12 views

CVE-2026-56369 ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/30 10:08 p.m.•48 views

CVE-2026-56369

CVE-2026-56369 concerns ImageMagick prior to 7.1.2-22, where an information-disclosure vulnerability arises in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers could potentially recover plaintext from encrypted images because the nonce is reused in the CTR mode. The available...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/06/30 10:08 p.m.•14 views

CVE-2026-56369

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•3 views

CVE-2026-56369: Reusing a Nonce, Key Pair in Encryption

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images...

6.3CVSS5.5AI score0.0023EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•26 views

Insecure Randomness

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/21 9:49 p.m.•30 views

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

5.8AI score
SaveExploits0References3Affected Software17
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•25 views

Insecure Randomness

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•38 views

Insecure Randomness

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/21 9:49 p.m.•23 views

GHSA-QV2Q-C278-PCH5 ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

3.7CVSS5.5AI score0.0023EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/21 9:49 p.m.•22 views

Insecure Randomness

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.4AI score0.0023EPSS
SaveExploits0References3
Rows per page
Query Builder