Lucene search
K

16 matches found

SUSE CVE
SUSE CVE
added 6 days ago8 views

SUSE CVE-2026-41159

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermaid's default configuration allows injecting CSS that applies outside of the Mermaid diagram via the fontFamily, themeCSS, and altFontFamily configuration...

5.3CVSS5.8AI score0.00057EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/06 12:0 a.m.3 views

SUSE SLES15 / openSUSE 15 Security Update : ImageMagick (SUSE-SU-2026:0011-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0011-1 advisory. - CVE-2025-65955: possible use-after-free/double-free in Options::fontFamily when clearing a family can lead to crash...

7.5CVSS5.6AI score0.00047EPSS
Exploits0References7
Amazon
Amazon
added 2026/01/05 12:0 a.m.2 views

Medium: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick's Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family...

6.1CVSS6.9AI score0.00018EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:0 a.m.3 views

SUSE SLES15 Security Update : ImageMagick (SUSE-SU-2025:4428-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4428-1 advisory. - CVE-2025-65955: possible use-after-free/double-free in Options::fontFamily when clearing a family can lead to crashes or memory...

7.5CVSS5.7AI score0.00047EPSS
Exploits0References7
OSV
OSV
added 2025/12/12 12:20 p.m.3 views

OESA-2025-2833 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

6.1CVSS6.7AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2025/12/05 1:12 p.m.2 views

OESA-2025-2791 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

6.1CVSS6.7AI score0.00018EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-65955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in...

6.1CVSS6AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2025/12/03 4:25 p.m.1 views

GHSA-Q3HC-J9X5-MP9M Withdrawn Advisory: ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family

Withdrawn Advisory This advisory has been withdrawn because it does not affect the ImageMagick project's NuGet packages. Original Description We believe that we have discovered a potential security vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked wi...

4.9CVSS6.8AI score0.00018EPSS
Exploits0References5
OSV
OSV
added 2025/12/02 11:15 p.m.1 views

UBUNTU-CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...

4.9CVSS5.8AI score0.00018EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2025/12/02 11:2 p.m.2 views

CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...

6.1CVSS6.4AI score0.00018EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/12/02 11:2 p.m.4 views

CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...

6.1CVSS5.3AI score0.00018EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.1 views

PT-2025-48786

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-9 ImageMagick versions prior to 6.9.13-34 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the Magick++ layer when the Options::fontFamily function is...

7.5CVSS6.7AI score0.0009EPSS
Exploits3References27
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

编号撤回

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A resource management error vulnerability exists in ImageMagick versions prior to 7.1.2-9 and prior to 6.9.13-34, which stems from the reuse...

6.1CVSS6.2AI score0.00018EPSS
Exploits0References4
OSV
OSV
added 2024/11/06 12:15 p.m.3 views

CVE-2024-8323

The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

5.4CVSS5.9AI score0.00391EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/11/06 12:0 a.m.3 views

WordPress plugin Easy Pricing Tables 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00391EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/11/06 12:0 a.m.3 views

PT-2024-38938 · WordPress · Easy Pricing Tables

Name of the Vulnerable Software and Affected Versions: Easy Pricing Tables plugin for WordPress versions up to, and including, 3.2.6 Description: The issue is related to Stored Cross-Site Scripting via the fontFamily attribute due to insufficient input sanitization and output escaping. This allow...

6.4CVSS6.1AI score0.00391EPSS
Exploits0References10
Rows per page
Query Builder