61959 matches found
ImageMagick Security Policy Unauthorized Access
The vulnerability of the ImageMagick console-based graphic editor’s security implementation is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ImageMagick IPTCTEXT DoS
The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ImageMagick JPEG Encoder DoS
The vulnerability of the JPEG encoder in console-based image editing software ImageMagick relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created image...
golang-x-image DoS
The vulnerability of the golang-x-image package, a programming language, is related to incorrect calculations during the processing of WEBP image formats. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
ImageMagick JBIG DoS
The vulnerability of the JBIG decoder in the ImageMagick console-based graphics editor is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-61004
Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1 Description An integer overflow occurs when processing screen update messages in the vnc-any connection mode. A remote VNC server can send crafted image dimensions that cause an integer overflow during memory...
PT-2026-56397
Name of the Vulnerable Software and Affected Versions Imager versions prior to 1.033 Description Imager for Perl incorrectly treats unsigned EXIF IFD Image File Directory entry counts as signed. When processing large entry count values, the software interprets them as negative numbers, which can...
ROS-20260708-73-0071
The vulnerability in ImageMagick7 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Important: Red Hat Security Advisory: satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview
A new satellite/foreman-mcp-server-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Satellite provides a container image that you can use to run an MCP server locally. The MCP server for Satellite is designed for advanced reporting and data analysi...
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
EUVD-2026-42062
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
CVE-2026-48953 Joomla! Core - [20260707] - XSS in the generic image output layout
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
CVE-2026-48953
CVE-2026-48953 affects Joomla! Core. The issue is an XSS in the generic image output layout caused by a lack of escaping in the rendering path. Affected software is Joomla! Core (security entry notes this under 2026-07-07). The root cause is input/output escaping not being applied when generating...
CVE-2026-48953 Joomla! Core - [20260707] - XSS in the generic image output layout
Lack of escaping leads to an XSS vulnerability in the generic image output layout...
GO-2026-5761 Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc
Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc...
Server-side Request Forgery (SSRF)
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the loadurlimage function, which performs a GET request on user-supplied URLs without restricting the domain. An attacker can access internal network resources and perform...
GHSA-JGX9-JR5X-MVPV Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
Summary There is a blind server side request forgery in the functionality that allows editing an image via a prompt. The affected function will perform a GET request on the URL provided by the user. There is no restriction on the domain of the provided URL allowing the local address space to be...