Lucene search
+L

3647 matches found

Mend
Mend
•added 2026/10/07 3:26 p.m.•14 views

CVE-2026-106570

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

5.3CVSS5.7AI score0.00218EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/07 3:26 p.m.•13 views

CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

4.3CVSS5.7AI score0.00218EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/07 3:26 p.m.•32 views

CVE-2026-106570

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition in its distributed pixel cache server . An unauthenticated client on an adjacent network can exhaust the server's available connections by repeatedly connecting to it. This issue is characterized by u...

6.5CVSS5.7AI score0.00218EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2026/10/07 3:26 p.m.•18 views

CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

4.3CVSS5.7AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-106570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can...

6.5CVSS5.7AI score0.00218EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•26 views

PT-2026-107553

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description An unauthenticated adjacent-network client can cause a denial of service by repeatedly connecting to the distributed pixel cache server, which exhausts the available connections. Recommendatio...

8.2CVSS5.8AI score0.00441EPSS
SaveExploits0References94
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•15 views

PT-2026-107557

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, resulting in a server crash. A...

8.2CVSS6.2AI score0.00441EPSS
SaveExploits0References94
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-106574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel...

6.5CVSS6AI score0.00208EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•10 views

CVE-2026-106574: Heap-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

6.5CVSS6.1AI score0.00208EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-106570: Uncontrolled Resource Consumption

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

6.5CVSS5.8AI score0.00218EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•16 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory was rendered to the screen, potentially exposing sensitive data to attackers. This issue has been fixed in version 3.24.2...

7.1CVSS6AI score0.00205EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•13 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to work without a challenge-response authentication model. This has been changed in versions 6.9.13-48 and...

4.1CVSS5AI score0.00146EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•15 views

Astra Linux – Vulnerability in imagemagick

In the functions CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all part of /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations that were used with the floor function. These calculations resulted ...

5.5CVSS6AI score0.01186EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•16 views

Astra Linux – Vulnerability in imagemagick

In the IntensityCompare function in /magick/quantize.c, there are calls to PixelPacketIntensity, which may return overflowing values to the caller when ImageMagick processes a crafted input file. To address this issue, the patch introduces and utilizes the ConstrainPixelIntensity function. This...

4.3CVSS6AI score0.01138EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•15 views

Rocky Linux 9 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_8457)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268457 advisory. FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data CVE-2026-33984 FreeRDP: FreeRDP: Denial of Service via...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•12 views

Rocky Linux 10.1 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_8458)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268458 advisory. FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data CVE-2026-33984 FreeRDP: FreeRDP: Denial of Service via...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References10
NVD
NVD
•added 2026/09/30 1:17 p.m.•10 views

CVE-2026-94674

Contributor Cross Site Scripting XSS in Pixel Manager for WooCommerce = 1.69.0 versions...

6.5CVSS0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 12:27 p.m.•7 views

CVE-2026-94674 WordPress Pixel Manager for WooCommerce plugin <= 1.69.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Pixel Manager for WooCommerce = 1.69.0 versions...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 12:27 p.m.•20 views

CVE-2026-94674

The WordPress Pixel Manager for WooCommerce plugin in versions

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 12:27 p.m.•36 views

CVE-2026-94674 WordPress Pixel Manager for WooCommerce plugin <= 1.69.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Pixel Manager for WooCommerce = 1.69.0 versions...

6.5CVSS0.00161EPSS
SaveExploits0References1
Rows per page
Query Builder