Lucene search
+L

2403 matches found

RedhatCVE
RedhatCVE
added 2025/03/05 8:15 p.m.10 views

CVE-2025-25301

Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg...

7.5CVSS6.8AI score0.00507EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-9117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header matc...

9.8CVSS7.1AI score0.02221EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2017-11449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial...

8.8CVSS6.9AI score0.03389EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/03 4:36 p.m.91 views

CVE-2025-25301

Summary: Rembg (Python) versions up to and including 2.0.57 are affected by an SSRF vulnerability in the /api/remove endpoint. The endpoint accepts a URL query parameter to fetch, process, and return an image, which can enable an attacker to request internal-network resources hosted by the rembg ...

7.5CVSS6.7AI score0.00507EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/03/03 4:36 p.m.11 views

CVE-2025-25301 Rembg allows SSRF via /api/remove

Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg...

6.9CVSS6.4AI score
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux - уязвимость в imagemagick

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service...

5.5CVSS7.2AI score0.00466EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/02/06 12:0 a.m.5 views

Unspecified Vulnerability in OpenImageIO

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. OpenImageIO security vulnerability , the vulnerability stems from the component / imagebuf.cpp in the allocation of the size of the over-sized error , ...

9.8CVSS7AI score0.006EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/02/06 12:0 a.m.4 views

OpenImageIO Buffer Overflow Vulnerability

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. OpenImageIO suffers from a buffer overflow vulnerability that stems from a boundary error in the component /OpenImageIO/fmath.h when processing untrust...

9.8CVSS7.5AI score0.00676EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:42 p.m.16 views

CVE-2020-13561

An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.2AI score0.01855EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.8 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from the disclosure of information during the processing of firmware image information during core initialization...

6.1CVSS6.4AI score0.00099EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/30 7:15 p.m.7 views

CVE-2024-44142

The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6AI score0.00318EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/30 6:49 p.m.29 views

CVE-2024-44142

The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution...

0.00318EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.9 views

The vulnerability in the module/loaders/loader_ico.c component of the Imlib2 image processing library allows a attacker to cause a service failure.

The vulnerability in the modules/loaders/loaderico.c component of the Imlib2 image processing library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9.1CVSS8AI score0.01589EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2025/01/27 10:15 p.m.8 views

CVE-2025-24086

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing an image may lead to a denial-of-service...

5.5CVSS5.8AI score0.00273EPSS
SaveExploits0References14
NVD
NVD
added 2025/01/27 6:15 p.m.43 views

CVE-2024-12740

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

7.8CVSS0.0019EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/27 5:17 p.m.53 views

CVE-2024-12740

CVE-2024-12740 affects NI Vision software (Vision Development Module, Vision Assistant, Vision Builder AI) via a third‑party image-processing library. The concrete issue is in parsing JPG files (Vision Assistant/VBAI) leading to out-of-bounds/write conditions that allow remote code execution. Exp...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/27 5:17 p.m.9 views

CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

7.8CVSS8AI score0.0019EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/27 5:17 p.m.21 views

CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

7.8CVSS0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.13 views

PT-2025-1943 · National Instruments · Ni Vision Builder Ai +1

Name of the Vulnerable Software and Affected Versions: NI Vision Builder AI affected versions not specified NI Vision Development Module affected versions not specified Description: The issue is related to the use of a third-party library for image processing in NI's vision software, which expose...

7.8CVSS7.8AI score0.0019EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.6 views

PT-2025-5271 · Apple · Macos Sonoma +8

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS...

5.5CVSS8.3AI score0.00273EPSS
SaveExploits0References15
Rows per page
Query Builder