Lucene search
+L

3379 matches found

CNNVD
CNNVD
added 2026/03/05 12:0 a.m.13 views

WordPress plugin Page and Post Clone SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.9AI score0.00249EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.24 views

PT-2026-23415

The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta key' parameter in the content clone function in all versions up to, and including, 6.3. This is due to insufficient escaping on the user-supplied meta key value and insufficient preparation on the existing S...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2026/03/04 11:17 p.m.13 views

WordPress Page and Post Clone plugin <= 6.3 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter vulnerability

Authenticated Contributor+ SQL Injection via 'metakey' Parameter vulnerability discovered by Arthur GRIMAULT in WordPress Plugin Page and Post Clone versions = 6.3...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2026/03/02 6:45 a.m.11 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS6.5AI score0.00765EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/02/25 11:30 a.m.8 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS6.5AI score0.00765EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/02/25 9:32 a.m.13 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS6.5AI score0.00765EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.4 views

SUSE CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

5.3CVSS5.9AI score0.00429EPSS
SaveExploits0References6
OSV
OSV
added 2026/02/24 3:36 p.m.7 views

GHSA-P863-5FGM-RGQ4 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

A NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in Denial of Service. AddressSanitizer:DEADLYSIGNAL =================================================================...

5.3CVSS5.6AI score0.00429EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/02/24 3:36 p.m.8 views

NULL Pointer Dereference

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6AI score0.00429EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:36 p.m.7 views

NULL Pointer Dereference

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS6AI score0.00429EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:36 p.m.6 views

NULL Pointer Dereference

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6AI score0.00429EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:36 p.m.6 views

NULL Pointer Dereference

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.5CVSS6AI score0.00429EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:36 p.m.7 views

NULL Pointer Dereference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6AI score0.00429EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:36 p.m.3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ClonePixelCacheRepository function. An attacker can cause a crash of the application by supplying a specially crafted image file. Remediation A fix was pushed into the master branch but not yet published...

7.5CVSS5.9AI score0.00429EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/02/24 11:39 a.m.17 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS6.5AI score0.00765EPSS
SaveExploits1References8
OSV
OSV
added 2026/02/24 1:16 a.m.2 views

DEBIAN-CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

7.5CVSS7.8AI score0.00429EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/24 1:16 a.m.10 views

CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

7.5CVSS0.00429EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 1:2 a.m.6 views

CVE-2026-25798 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

5.3CVSS5.6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/24 1:2 a.m.5 views

CVE-2026-25798 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

5.3CVSS5.5AI score0.00429EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/02/24 1:2 a.m.7 views

CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

7.5CVSS7.8AI score0.00429EPSS
SaveExploits0
Rows per page
Query Builder