Lucene search
K

134 matches found

OSV
OSV
added 2021/09/13 6:15 p.m.2 views

UBUNTU-CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS6.5AI score0.00024EPSS
Exploits0References6
Prion
Prion
added 2021/09/13 6:15 p.m.20 views

Design/Logic Flaw

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

3.6CVSS5.3AI score0.00024EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2021/09/13 12:0 a.m.17 views

CVE-2021-39212 Issue when Configuring the ImageMagick Security Policy

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS6.2AI score0.00024EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2021/09/13 12:0 a.m.44 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS4.8AI score0.00024EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/09/11 12:0 a.m.4 views

PT-2021-7869 · Unknown +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.12-22 ImageMagick versions prior to 7.1.0-7 Description: The issue is related to the handling of Postscript files in ImageMagick, where these files could be read and written even when excluded by a module...

7.8CVSS5.9AI score0.6875EPSS
Exploits7References110
OSV
OSV
added 2021/09/10 11:57 a.m.0 views

USN-5075-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

9.9CVSS7.5AI score0.06493EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.1 views

Pillow 输入验证错误漏洞

Pillow is a Python-based image processing library. a denial of service vulnerability exists in versions of Pillow prior to 8.2.0, which can be exploited by attackers with malicious EPS files to cause a denial of service...

7.5CVSS5.6AI score0.00286EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2020/08/04 12:0 a.m.39 views

Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-4445-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4445-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted...

9.8CVSS8.6AI score0.217EPSS
Exploits0References2
OSV
OSV
added 2020/08/03 1:7 p.m.1 views

USN-4445-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code,...

9.8CVSS7.5AI score0.217EPSS
Exploits0References2
ArchLinux
ArchLinux
added 2020/05/06 12:0 a.m.22 views

[ASA-202005-4] a2ps: multiple issues

Arch Linux Security Advisory ASA-202005-4 ========================================= Severity: High Date : 2020-05-06 CVE-ID : CVE-2014-0466 CVE-2015-8107 Package : a2ps Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1150 Summary ======= The package a2ps before versio...

7.8CVSS8.2AI score0.01778EPSS
Exploits1References5
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.25 views

Adobe Bridge PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS1.5AI score0.01763EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1087)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.9181EPSS
Exploits4References2
OSV
OSV
added 2019/11/14 4:26 p.m.0 views

USN-4193-1 ghostscript vulnerability

Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause...

8.8CVSS7.3AI score0.00503EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:0 a.m.33 views

Adobe Acrobat Pro DC PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS5AI score0.06066EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:0 a.m.22 views

Adobe Acrobat Pro DC RestorePlugInFrame Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS3.8AI score0.03955EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:0 a.m.16 views

Adobe Acrobat Pro DC Distiller PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.7AI score0.01736EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/28 12:0 a.m.1 views

Artifex Software Ghostscript Permission License and Access Control Issues Vulnerability (CNVD-2019-41843)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

9.8CVSS7.8AI score0.08454EPSS
Exploits0References1
Source Incite
Source Incite
added 2019/06/02 12:0 a.m.29 views

SRC-2019-0080 : Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

9.8CVSS9.6AI score0.03176EPSS
Exploits1
OSV
OSV
added 2019/05/23 3:29 p.m.1 views

DEBIAN-CVE-2017-15652

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...

5.5CVSS7AI score0.00255EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.22 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.0615EPSS
Exploits0References1
Rows per page
Query Builder