Lucene search
+L

1716 matches found

Snyk
Snyk
added 2026/03/10 9:02 p.m.13 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.13 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.11 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.12 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.7 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.9 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.14 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.13 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.11 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.14 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.24 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/03/10 9:02 p.m.13 views

ImageMagick has a Path Policy TOCTOU symlink race bypass

domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References4Affected Software19
Snyk
Snyk
added 2026/03/10 9:02 p.m.10 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/10 9:02 p.m.8 views

GHSA-493F-JH8W-QHX3 ImageMagick has a Path Policy TOCTOU symlink race bypass

domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/10 5:39 p.m.13 views

CVE-2026-2364

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer...

7.3CVSS0.00084EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.13 views

PT-2026-24493

Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occ...

7.1CVSS5.7AI score0.00076EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2026/03/10 12:00 a.m.10 views

Huawei EulerOS: Security Advisory for python-virtualenv (EulerOS-SA-2026-1260)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.5CVSS5.8AI score0.00098EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.14 views

PT-2026-24478

Name of the Vulnerable Software and Affected Versions Sylius versions 1.9.12, 1.10.16, 1.11.17, 1.12.23, 1.13.15, 1.14.18, 2.0.16, 2.1.12, and 2.2.3 and above Description Sylius, an Open Source eCommerce Framework on Symfony, contains a Time-of-Check To Time-of-Use TOCTOU race condition in the...

8.2CVSS5.8AI score0.00179EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.17 views

PT-2026-24498

Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module affected versions not specified Description A time-of-check time-of-use race condition exists in the UEFI PdaSmm module on certain Intel reference platforms, potentially leading to information disclosure. A system software...

5.6CVSS5.7AI score0.00083EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.32 views

PT-2026-24180

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer...

7.3CVSS5.8AI score0.00084EPSS
SaveExploits0References1
Rows per page
Query Builder