Lucene search
K

8509 matches found

Snyk
Snyk
added 2025/08/26 5:20 p.m.6 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.3 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.1 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.2 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.4 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.5 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.1 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.3 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.4 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.5 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.3 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.4 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.4 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04098EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.3 views

Use of Externally-Controlled Format String

Overview Affected versions of this package are vulnerable to Use of Externally-Controlled Format String via the InterpretImageFilename function, where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can execute arbitrary code or cause a heap-based buff...

8.8CVSS7.9AI score0.04098EPSS
Exploits1References2
CVE
CVE
added 2025/08/26 5:20 p.m.50 views

CVE-2025-55298

ImageMagick vulnerability CVE-2025-55298 is caused by a format string bug in InterpretImageFilename where un-sanitized user input is passed to FormatLocaleString, enabling potential heap overflow or remote code execution due to memory overwrite. Affected releases before patches include ImageMagic...

8.8CVSS7.6AI score0.04098EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/08/26 5:20 p.m.2 views

CVE-2025-55298 ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

7.5CVSS7.7AI score0.04098EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2025/08/26 3:29 p.m.9 views

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...

8.8CVSS8AI score0.04098EPSS
Exploits1References6Affected Software18
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.0 views

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 6.9.13-28 and 7.1.2-2, which stems from a format string vulnerability that...

8.8CVSS7.6AI score0.04098EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2015-8106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format stri...

9.3CVSS7.9AI score0.03556EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2014-8625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple format string vulnerabilities in the parseerrormsg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service...

6.8CVSS6AI score0.03296EPSS
Exploits1References2
Rows per page
Query Builder