Lucene search
+L

27420 matches found

Snyk
Snyk
•added 2025/08/26 5:20 p.m.•16 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•16 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•13 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•11 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•13 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•15 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/08/26 5:20 p.m.•41 views

CVE-2025-55298 ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

7.5CVSS0.0449EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•15 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•14 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•14 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•9 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2025/08/26 5:20 p.m.•17 views

CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

8.8CVSS8.3AI score0.0449EPSS
SaveExploits1
Mend
Mend
•added 2025/08/26 5:20 p.m.•4 views

CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

8.8CVSS0.0449EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2025/08/26 3:29 p.m.•17 views

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...

8.8CVSS8AI score0.0449EPSS
SaveExploits1References6Affected Software18
osv_ghsa
osv_ghsa
•added 2025/08/26 3:29 p.m.•15 views

GHSA-9CCG-6PJW-X645 ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...

7.5CVSS8.8AI score0.0449EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2025/08/26 12:45 p.m.•23 views

gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

7.5CVSS6.3AI score0.01341EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/08/26 12:31 a.m.•25 views

LlamaIndex affected by a Denial of Service (DOS) in JSONReader

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS8.2AI score0.00285EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2024-28574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the...

6.2CVSS5.8AI score0.00287EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-28582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the rgbeRGBEToFloat function when...

8.4CVSS6.1AI score0.00356EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2021-40609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. CVE-2021-40609 Note that Nessus...

5.5CVSS6.7AI score0.00645EPSS
SaveExploits1References2
Rows per page
Query Builder