Lucene search
+L

1147 matches found

RedhatCVE
RedhatCVE
added 2026/06/10 11:33 p.m.10 views

CVE-2026-45664

A flaw was found in ImageMagick. A remote attacker could exploit a missing check in the Multiple-image Network Graphics MNG coder to read more images than allowed by policy. This could lead to excessive resource consumption, resulting in a denial of service DoS. Mitigation Mitigation for this iss...

7.5CVSS5.1AI score0.00441EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/10 10:16 p.m.10 views

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

7.5CVSS0.00441EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/10 9:30 p.m.11 views

EUVD-2026-36163

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS5.3AI score0.00441EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 9:30 p.m.46 views

CVE-2026-45664

CVE-2026-45664 affects ImageMagick. A missing check in the MNG coder could allow reading more images than the policy limit, causing excessive resource usage (potential DoS). The issue is fixed in patched releases: ImageMagick 6.9.13-47 and 7.1.2-22 . Vendors and advisories (e.g., SUSE, Red Hat, D...

7.5CVSS5.3AI score0.00441EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/06/10 9:30 p.m.4 views

CVE-2026-45664 ImageMagick: Policy Bypass in MNG coder could

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS6.1AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/06/10 9:30 p.m.8 views

CVE-2026-45664 ImageMagick: Policy Bypass in MNG coder could

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS5.3AI score0.00441EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/10 9:30 p.m.13 views

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

7.5CVSS5.3AI score0.00441EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/06/10 9:30 p.m.19 views

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

7.5CVSS5.3AI score0.00441EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/06/10 9:30 p.m.50 views

CVE-2026-45664 ImageMagick: Policy Bypass in MNG coder could

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS0.00441EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/02 9:0 p.m.14 views

Embedded Malicious Code

Overview @evolvconsulting/evolv-coder-lite is a light-weight meta-prompting, context engineering, and spec-driven development system for Claude Code, OpenCode, Gemini CLI, Kilo, Codex, Copilot, Cursor, Windsurf, and more. Affected versions of this package are vulnerable to Embedded Malicious Code...

9.8CVSS5.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/02 4:1 p.m.16 views

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS5.6AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/31 9:31 a.m.5 views

GHSA-7W7M-V5VP-W699 Aider is vulnerable to Code Injection via editor_coder.run function

A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...

6.3CVSS6.2AI score0.00242EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/31 8:45 a.m.8 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

5.3CVSS6.2AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/05/31 8:45 a.m.50 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS0.00242EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/31 8:45 a.m.13 views

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS5.6AI score0.00242EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/05/31 8:45 a.m.51 views

CVE-2026-10175

Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...

6.5CVSS6.4AI score0.00242EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/05/31 8:45 a.m.13 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.00242EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/31 12:0 a.m.16 views

Aider 代码注入漏洞

Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a code injection vulnerability. This vulnerability arises from the operation editorcoder.run in the Architect Mode component, allowing for code injection. Attackers can launch attacks...

6.5CVSS6.7AI score0.00242EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.28 views

Linux Distros Unpatched Vulnerability : CVE-2026-45664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing...

7.5CVSS6AI score0.00441EPSS
SaveExploits0References2
Chainguard
Chainguard
added 2026/05/20 7:17 p.m.11 views

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: grafana-alloy, melange, argocd-image-updater-fips, trivy, k9s-fips, grype, gitlab-rails-ce-fips, argo-events, chainloop-cli-fips, grype-db, flux-fips, cloudbeat, osv-scanner, xeol-fips, snyk-cli, kubevela-fips, coder, trufflehog, gitaly, grafana-alloy-fips,...

5.4AI score
SaveExploits0
Rows per page
Query Builder