Lucene search
K

3850 matches found

RedhatCVE
RedhatCVE
added 2026/01/22 11:24 p.m.3 views

CVE-2026-1036

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletecomment function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to...

5.3CVSS5.7AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 1:15 a.m.9 views

CVE-2026-23952

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

7.5CVSS0.0043EPSS
Exploits1References2
OSV
OSV
added 2026/01/22 1:15 a.m.1 views

UBUNTU-CVE-2026-23952

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

7.5CVSS5.8AI score0.0043EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/22 12:32 a.m.21 views

CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

6.5CVSS0.0043EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/22 12:32 a.m.2 views

CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

6.5CVSS5.6AI score0.0043EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/22 12:32 a.m.4 views

EUVD-2026-3699

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

6.5CVSS5.5AI score0.0043EPSS
Exploits1References3
CVE
CVE
added 2026/01/22 12:32 a.m.28 views

CVE-2026-23952

CVE-2026-23952 affects ImageMagick: a NULL pointer dereference in the MSL parser when processing tags before any image loads. Versions 14.10.1 and earlier are vulnerable; the issue can cause a DoS (assertion failure on debug builds or NULL dereference on release builds). A fix exists in version ...

7.5CVSS5.6AI score0.0043EPSS
Exploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/22 12:32 a.m.3 views

CVE-2026-23952

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

7.5CVSS5.7AI score0.0043EPSS
Exploits1References2
OSV
OSV
added 2026/01/22 12:32 a.m.2 views

CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL Magick Scripting Language parser when processing tags before images are loaded. This can lead to DoS attack due to...

6.5CVSS5.7AI score0.0043EPSS
Exploits1References4
NVD
NVD
added 2026/01/22 12:15 a.m.5 views

CVE-2026-1036

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletecomment function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00219EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.4 views

ImageMagick code vulnerabilities

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 14.10.1 have code vulnerabilities that stem from issues with the MSL parser, particularly when handling...

7.5CVSS6.7AI score0.0043EPSS
Exploits1References3
CVE
CVE
added 2026/01/21 11:23 p.m.17 views

CVE-2026-1036

CVE-2026-1036 (Photo Gallery by 10Web – WordPress) is confirmed in connected sources as a real vulnerability. The WordPress plugin is vulnerable to unauthorized modification of data via delete_comment(), due to a missing capability check. All versions up to and including 1.8.36 are affected. The ...

5.3CVSS5.7AI score0.00219EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/21 11:23 p.m.5 views

CVE-2026-1036

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletecomment function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to...

5.3CVSS5.5AI score0.00219EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/21 11:23 p.m.23 views

CVE-2026-1036 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletecomment function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00219EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/21 11:23 p.m.3 views

CVE-2026-1036 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletecomment function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to...

5.3CVSS5.7AI score0.00219EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/21 12:11 p.m.6 views

WordPress Photo Gallery by 10Web plugin <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Comment Deletion vulnerability discovered by Moose Love - Nagasaki Prefectural University in WordPress Plugin Photo Gallery by 10Web versions = 1.8.36...

5.3CVSS5.5AI score0.00219EPSS
Exploits0References1Affected Software1
Snyk
Snyk
added 2026/01/21 1:6 a.m.3 views

NULL Pointer Dereference

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.5CVSS5.7AI score0.0043EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/21 1:6 a.m.3 views

NULL Pointer Dereference

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.7AI score0.0043EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/21 1:6 a.m.4 views

NULL Pointer Dereference

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.7AI score0.0043EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/21 1:6 a.m.4 views

NULL Pointer Dereference

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.7AI score0.0043EPSS
Exploits1References2
Rows per page
Query Builder