Lucene search
+L

385 matches found

Patchstack
Patchstack
added 2026/04/07 10:44 p.m.10 views

WordPress Smart Slider 3 plugin <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation vulnerability

Missing Authorization to Authenticated Contributor+ Slider Data Read and Image Record Manipulation vulnerability discovered by darkmode in WordPress Plugin Smart Slider 3 versions = 3.5.1.33...

5.4CVSS5.9AI score0.00357EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/27 7:01 a.m.9 views

CVE-2026-33536

A flaw was found in ImageMagick, an open-source software for image manipulation. This vulnerability, caused by an incorrect return value, allows a local attacker to write data outside of its intended memory area, known as an out-of-bounds write. The primary consequence of this flaw is a denial of...

5.1CVSS5.6AI score0.00128EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:00 a.m.11 views

RHEL 9 : gimp (RHSA-2026:5391)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5391 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

8.8CVSS7.2AI score0.04642EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/03/12 8:16 p.m.20 views

CVE-2026-32259

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and...

6.7CVSS6AI score0.00096EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/03/09 9:49 p.m.15 views

CVE-2026-30936

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operati...

5.5CVSS7.7AI score0.00106EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/09 9:37 p.m.13 views

CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

5.3CVSS5.8AI score0.00243EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/03/09 6:31 a.m.9 views

EUVD-2026-10291

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclose...

8.8CVSS6.3AI score0.00299EPSS
SaveExploits1References6
Fedora
Fedora
added 2026/03/07 12:34 a.m.11 views

[SECURITY] Fedora 44 Update: gimp-3.0.8-5.fc44

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for web pages. GIMP has many of the tools and filters you would expe ct to find in similar commercial offerings, and some interesting extras...

5.7AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/02/25 12:25 a.m.13 views

SUSE CVE-2026-24485

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage function becomes trapped in an infinite loop while searching for the Sync marker, causing...

5.5CVSS5.8AI score0.00449EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.8 views

SUSE CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS5.8AI score0.00327EPSS
SaveExploits0References7
NVD
NVD
added 2026/02/24 3:16 a.m.30 views

CVE-2026-26983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...

5.3CVSS0.0045EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/24 1:50 a.m.10 views

EUVD-2026-7416

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary check instead of = that allows bypass the guard and reach an undefined sizet cast...

7.5CVSS5.4AI score0.00594EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/02/24 1:48 a.m.11 views

CVE-2026-25988

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks. Versions 7.1.2-15 and 6.9.13-4...

7.5CVSS7.8AI score0.00438EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/02/24 12:00 a.m.16 views

PT-2026-21651

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crash can occur in the MSL...

9.8CVSS5.1AI score0.00594EPSS
SaveExploits0References151
CVE
CVE
added 2026/02/20 10:23 p.m.49 views

CVE-2026-2048

CVE-2026-2048 refers to GIMP XWD file parsing Out-Of-Bounds Write with remote code execution. According to the connected advisories, the flaw is caused by insufficient validation of user-supplied data during XWD file parsing, allowing a write past the end of a heap/buffer to occur and enabling co...

7.8CVSS7.8AI score0.00622EPSS
SaveExploits0References15Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 10:23 p.m.4 views

CVE-2026-2047 GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

7.8CVSS6.4AI score0.0062EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/20 10:10 p.m.5 views

CVE-2026-0797 GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.8AI score0.01157EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/18 12:00 a.m.9 views

DSA-6139-1 gimp - security update

Bulletin has no description...

6.5CVSS5.1AI score0.00838EPSS
SaveExploits3
OSV
OSV
added 2026/02/17 10:12 a.m.10 views

RHSA-2026:2707 Red Hat Security Advisory: gimp security update

Bulletin has no description...

7.8CVSS5.1AI score0.00757EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/02/16 10:06 a.m.14 views

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.8CVSS7.3AI score0.00757EPSS
SaveExploits0References2
Rows per page
Query Builder