Lucene search
+L

93538 matches found

Cvelist
Cvelist
•added 2026/10/07 3:36 p.m.•46 views

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

5.3CVSS0.00372EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/07 3:36 p.m.•5 views

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 3:35 p.m.•12 views

EUVD-2026-94393

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...

5.3CVSS6AI score0.00201EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/07 3:34 p.m.•9 views

EUVD-2026-94392

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and...

5.3CVSS5.7AI score0.00384EPSS
SaveExploits0References5
Mend
Mend
•added 2026/10/07 3:34 p.m.•8 views

CVE-2026-106573

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and...

6.9CVSS5.7AI score0.00384EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 3:33 p.m.•4 views

CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

5.3CVSS5.7AI score0.00305EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/07 3:33 p.m.•9 views

EUVD-2026-94391

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

5.3CVSS5.7AI score0.00384EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 3:28 p.m.•11 views

EUVD-2026-94390

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixe...

5.1CVSS5.8AI score0.0013EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 3:26 p.m.•9 views

EUVD-2026-94389

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

4.3CVSS5.8AI score0.00194EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/07 3:26 p.m.•10 views

CVE-2026-106570

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition in its distributed pixel cache server . An unauthenticated client on an adjacent network can exhaust the server's available connections by repeatedly connecting to it. This issue is characterized by u...

4.3CVSS5.8AI score0.00194EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/07 3:26 p.m.•41 views

CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

4.3CVSS0.00194EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/07 3:24 p.m.•10 views

CVE-2026-106568

ImageMagick , a free and open-source image manipulation software, is vulnerable to a Denial of Service (DoS) condition. A crafted XMP profile embedded within an image can trigger an infinite loop in the profile parser, which prevents image processing from completing. This issue affects versions p...

5.3CVSS5.7AI score0.00384EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 3:17 p.m.•6 views

DEBIAN-CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

6.2CVSS5.5AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/07 3:17 p.m.•10 views

CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

6.2CVSS0.00112EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/07 3:17 p.m.•7 views

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

6.2CVSS0.00121EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/07 2:43 p.m.•17 views

cve-2019-0708

CVE-2019-0708 Ce module vérifie une plage d'hôtes pour la vulnérabilité CVE-2019-0708 en liant le canal MST120 en dehors de son emplacement normal et en envoyant des paquets DoS. J'ai simplement modifié le module Metasploit initial pour cette vulnérabilité afin de produire une attaque par déni de...

10CVSS7.9AI score0.99999EPSS
SaveExploits126
CVE
CVE
•added 2026/10/07 2:34 p.m.•13 views

CVE-2026-107169

A flaw exists in m17n-lib within the read_mtext_element() function. An attacker can provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This vulnerability leads to an unexpected application crash, resulting in a Denial of Ser...

6.2CVSS5.5AI score0.00112EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/07 2:34 p.m.•38 views

CVE-2026-107169 M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

6.2CVSS0.00112EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/07 2:34 p.m.•11 views

EUVD-2026-94366

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

6.2CVSS5.5AI score0.00112EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/07 2:34 p.m.•10 views

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

6.2CVSS6.6AI score0.00121EPSS
SaveExploits0References2
Rows per page
Query Builder