Lucene search
+L

12876 matches found

Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•5 views

PT-2026-23899

If a texture attribute is specified for a TXT file, an attempt will be made to read it via texture=ReadImageread info,exception;. Later, when retrieving metrics via the GetTypeMetrics function, if this function fails i.e., status == MagickFalse, the calling function will exit immediately but fail...

6.9CVSS5.9AI score0.0044EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•31 views

WordPress plugin Rise Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.5AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•24 views

PT-2026-21881

The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.6AI score0.00181EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•6 views

CVE-2026-25736: Improper Neutralization of Input During Web Page Generation

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. Versions prior to 35.8.3, 38.5.4, and 39.3.1 have a stored Cross-Site Scripting XSS vulnerability in the Custom RSE Attribute of the WebUI where...

6.1CVSS6.1AI score0.00527EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•26 views

PT-2026-22002

Name of the Vulnerable Software and Affected Versions Rucio versions prior to 35.8.3, 38.5.4, and 39.3.1 Description Rucio is a software framework used to organize, manage, and access large volumes of scientific data. A stored Cross-Site Scripting XSS issue exists in the Custom RSE Attribute of t...

6.1CVSS5.9AI score0.00527EPSS
SaveExploits1References16
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•24 views

Rucio security vulnerabilities

Rucio is an open-source scientific data management tool developed by Rucio team. Versions of Rucio prior to 35.8.3, 38.5.4, and 39.3.1 contained security vulnerabilities. These vulnerabilities stemmed from uncontrolled input in the Custom RSE Attribute of the WebUI, which allowed attackers to...

6.1CVSS5.9AI score0.00527EPSS
SaveExploits1References5
Patchstack
Patchstack
•added 2026/02/24 11:15 p.m.•25 views

WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Secure Copy Content Protection and Content Locking versions = 5.0.1...

6.4CVSS5.4AI score0.00224EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2026/02/24 1:53 p.m.•39 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.4AI score0.01292EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/02/24 5:31 a.m.•21 views

CVE-2026-25968

A flaw was found in ImageMagick. A remote attacker could exploit a stack buffer overflow vulnerability by providing a specially crafted image file with a long attribute value. This flaw occurs when processing an attribute in msl.c, leading to memory corruption. This can result in unpredictable...

9.8CVSS6.9AI score0.00521EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/02/24 2:16 a.m.•12 views

DEBIAN-CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

9.8CVSS7.1AI score0.00521EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/24 2:16 a.m.•14 views

CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

9.8CVSS0.00521EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/02/24 2:16 a.m.•13 views

UBUNTU-CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

9.8CVSS7.1AI score0.00521EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/24 1:30 a.m.•10 views

CVE-2026-25968 ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

7.4CVSS7.1AI score0.00521EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/24 1:30 a.m.•12 views

CVE-2026-25968 ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

7.4CVSS6.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/02/24 1:30 a.m.•8 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the process of handling a specially crafted image file containing a long attribute value. An attacker can cause memory corruption, unpredictable behavior, or a denial of service by submitting a malicious...

9.8CVSS6.9AI score0.00521EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:30 a.m.•10 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:30 a.m.•15 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:30 a.m.•19 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:30 a.m.•15 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/24 1:30 a.m.•88 views

CVE-2026-25968

CVE-2026-25968 describes a stack buffer overflow in ImageMagick when processing the msl.c attribute. A long value overflows a fixed-size stack buffer, causing memory corruption. A patch exists in versions 7.1.2-15 and 6.9.13-40. Connected advisories also reiterate the same vulnerability and patch...

9.8CVSS7.1AI score0.00521EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder