Lucene search
K

2177 matches found

Snyk
Snyk
added 2026/03/26 10:9 p.m.3 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.6CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/26 10:9 p.m.1 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.6CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.0 views

PT-2026-28384

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions prior to 2.6.0 Description The application is designed for managing recipes, planning meals, and creating shopping lists. Prior to version 2.6.0, the image processing pipeline does not remove EXIF metadata, rescale...

5.3CVSS5.9AI score0.00057EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.4 views

Tandoor Recipes 安全漏洞

Tandoor Recipes is an open-source application designed for managing recipes, planning meals, creating shopping lists, and more. Versions of Tandoor Recipes prior to 2.6.0 contained security vulnerabilities. These vulnerabilities stemmed from the image processing pipeline skipping the EXIF metadat...

5.3CVSS5.8AI score0.00057EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/26 12:0 a.m.6 views

CVE-2026-29905

Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service DoS via a malformed image upload. The application fails to properly validate the return value of the PHP getimagesize function. When the system attempts to process this file for...

5.8AI score0.00018EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:0 a.m.4 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : LibTIFF vulnerabilities (USN-8113-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8113-1 advisory. It was discovered that LibTIFF did not properly handle memory when processing certain...

9.8CVSS5.9AI score0.00035EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2026/03/24 3:19 a.m.2 views

CVE-2026-4739

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS5.2AI score0.00063EPSS
Exploits0
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

ITK 安全漏洞

ITK is an open-source cross-platform tool suite for scientific image processing and segmentation, developed by the Insight Software Consortium. Versions of ITK prior to 2.7.1 contained security vulnerabilities, which were caused by integer overflow or circularity errors...

9.4CVSS5.9AI score0.00063EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

Android ImageMagick 安全漏洞

Android ImageMagick is an image processing library developed by Cherry’s individual developer for the Android platform. Versions of Android ImageMagick prior to 7.1.2-11 contained security vulnerabilities, which were caused by improper input validation...

9.8CVSS5.8AI score0.00127EPSS
Exploits0References1
OSV
OSV
added 2026/03/23 6:14 p.m.1 views

GO-2026-4727 Mattermost fails to bound memory allocation when processing PSD image files in github.com/mattermost/mattermost-server

Mattermost fails to bound memory allocation when processing PSD image files in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

4.3CVSS5.8AI score0.00061EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2026/03/23 12:0 a.m.87 views

📄 AVideo Command Injection

The Metasploit exploit module targets a command injection vulnerability in AVideo. This module exploits a base64-encoded command injection flaw in AVideo Encoder's image processing endpoint, turning a simple URL parameter into remote code execution with multiple payload strategies. Versions prior...

6.5AI score
Exploits0
EUVD
EUVD
added 2026/03/21 3:33 p.m.1 views

EUVD-2019-19854

CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during t...

6.9CVSS6AI score0.00019EPSS
Exploits1References4
NVD
NVD
added 2026/03/21 1:16 p.m.4 views

CVE-2019-25553

CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during t...

6.9CVSS0.00019EPSS
Exploits1References3
EUVD
EUVD
added 2026/03/21 12:31 a.m.2 views

EUVD-2026-13842

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS6AI score0.00048EPSS
Exploits0References6
OSV
OSV
added 2026/03/21 12:16 a.m.3 views

CVE-2026-2430

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS6AI score
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/20 11:25 p.m.1 views

CVE-2026-2430

The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3.1.14. This is due to the use of an overly permissive regular expression in the addlazyload function that replaces all occurrences of \ssr...

6.4CVSS6AI score0.00048EPSS
Exploits0References6
OSV
OSV
added 2026/03/20 2:25 p.m.3 views

OESA-2026-1692 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.6AI score0.00067EPSS
Exploits0References15
HackRead
HackRead
added 2026/03/18 9:16 p.m.3 views

Computer Vision Frameworks: Features And Future Trends

Computer vision frameworks explained, features, types, and future trends. Learn how AI tools process images, train models, and…...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/16 2:18 p.m.0 views

CVE-2026-26246

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticated attacker to cause server memory exhaustion and denial of service via uploading a specially crafted PSD file. Mattermost Advisory I...

4.3CVSS5.9AI score
Exploits0References1
Snyk
Snyk
added 2026/03/12 2:16 p.m.1 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7CVSS5.9AI score0.00019EPSS
Exploits0References2
Rows per page
Query Builder