Lucene search
+L

518 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.3 views

SUSE CVE-2006-5456

Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via 1 a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or 2 a PALM image that is not...

5.1CVSS7.9AI score0.03572EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.5 views

SUSE CVE-2007-1797

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via 1 a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or 2 the a colors or b comments field in a crafted XWD image, which results in a heap-based...

6.8CVSS8.2AI score0.0353EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.3 views

SUSE CVE-2007-4986

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted 1 .dcm, 2 .dib, 3 .xbm, 4 .xcf, or 5 .xwd image file, which triggers a heap-based buffer overflow...

6.8CVSS8AI score0.03286EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.5 views

SUSE CVE-2016-5689

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks...

9.8CVSS7.2AI score0.05445EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.5 views

SUSE CVE-2016-5690

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...

9.8CVSS7.3AI score0.05445EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:42 a.m.5 views

SUSE CVE-2017-12140

The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file...

7.5CVSS8.9AI score0.02231EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.5 views

SUSE CVE-2017-12644

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c...

5.3CVSS9.2AI score0.02442EPSS
Exploits3References9
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.4 views

SUSE CVE-2018-5357

ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c...

5.3CVSS9.3AI score0.03688EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:30 a.m.4 views

SUSE CVE-2018-6405

In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service...

4.3CVSS9AI score0.01667EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.2 views

SUSE CVE-2018-11656

In ImageMagick 7.0.7-20 Q16 x8664, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file...

3.3CVSS8.5AI score0.01845EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.4 views

SUSE CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

5.3CVSS7.6AI score0.03666EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 4:24 a.m.8 views

SUSE CVE-2018-16644

There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image...

3.3CVSS6.6AI score0.03645EPSS
Exploits0References19
OSV
OSV
added 2022/11/11 4:15 p.m.7 views

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

8.8CVSS5.8AI score0.00518EPSS
Exploits1References1
NVD
NVD
added 2022/11/11 4:15 p.m.36 views

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

8.8CVSS0.00518EPSS
Exploits1References1
Prion
Prion
added 2022/11/11 4:15 p.m.28 views

Session fixation

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

5.8CVSS8.8AI score0.00518EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/11/11 3:48 p.m.38 views

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

8.8CVSS9.1AI score0.00518EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/11/11 3:48 p.m.14 views

CVE-2022-33942

Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

8.8CVSS8.9AI score0.00518EPSS
Exploits1References1
CVE
CVE
added 2022/11/11 3:48 p.m.67 views

CVE-2022-33942

CVE-2022-33942 describes a protection-mechanism failure in Intel® Data Center Manager (DCM) software prior to version 5.0 that may allow an unauthenticated user to escalate privileges via adjacent/network access. The issue affects the Intel DCM software before 5.0; impact is described as elevatio...

8.8CVSS8.8AI score0.00518EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/11 12:0 a.m.9 views

PT-2022-21928 · Intel · Intel Dcm

Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.0 Description: The issue is related to a protection mechanism failure in the IntelR DCM software, which may allow an unauthenticated user to potentially enable escalation of privilege via adjacent acces...

8.8CVSS8.8AI score0.00518EPSS
Exploits1References8
Cvelist
Cvelist
added 2022/09/19 3:47 p.m.24 views

CVE-2022-38425 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

5.5CVSS6.2AI score0.00443EPSS
Exploits0References1
Rows per page
Query Builder