Lucene search
K

116 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-32673 Malicious code in sanitize-interpret-zero-emulate-container (npm)

The package sanitize-interpret-zero-emulate-container was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-18230 Malicious code in delta-interpret-try-grid-alert (npm)

The package delta-interpret-try-grid-alert was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-23282 Malicious code in interpret-rain-delta-sed-resolve (npm)

The package interpret-rain-delta-sed-resolve was found to contain malicious code...

7.2AI score
Exploits0
Amazon
Amazon
added 2025/08/08 12:0 a.m.3 views

Medium: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue stems from an off-by-one error that causes out-of-bounds memory acce...

9.8CVSS7.2AI score0.00799EPSS
Exploits2
OSV
OSV
added 2025/07/25 1:17 p.m.2 views

OESA-2025-1909 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.8AI score0.00799EPSS
Exploits3References5
OSV
OSV
added 2025/07/14 6:15 p.m.1 views

DEBIAN-CVE-2025-53014

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processi...

9.8CVSS5.3AI score0.00623EPSS
Exploits1References1
Snyk
Snyk
added 2025/07/14 5:59 p.m.1 views

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the InterpretImageFilename function in the image.c file. An attacker can access sensitive information from adjacent memory locations by providing specially crafted input. Remediation A fix was pushed into the master...

9.8CVSS6.6AI score0.00623EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2025/07/14 5:59 p.m.3 views

CVE-2025-53014

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processi...

9.8CVSS7.8AI score0.00623EPSS
Exploits1
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.1 views

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 7.1.2-0 and prior to 6.9.13-26, which stems from a heap buffer overflow in...

9.8CVSS4.9AI score0.00623EPSS
Exploits1References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.3 views

Astra Linux – Vulnerability in cups

The vulnerability of the raster-interpret.c component in the CUPS printing server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.5CVSS5.5AI score
Exploits0References2
OSV
OSV
added 2025/01/27 12:10 a.m.6 views

OSV-2025-63 Stack-buffer-underflow in gs_type1_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391934080 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype1interpret copiedtype1glyphoutline gsdefaultglyphinfo...

7.2AI score
Exploits0References1
OSV
OSV
added 2024/11/08 10:15 p.m.1 views

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

6.2CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/11/08 10:15 p.m.16 views

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

6.2CVSS0.00256EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/11/08 12:0 a.m.3 views

wac 安全漏洞

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in version 385e1 of wac, which stems from a heap overflow in the interpret function and could lead to an attacker causing a denial of service via a...

6.2CVSS6.8AI score0.00256EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/11/08 12:0 a.m.14 views

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

0.00256EPSS
Exploits1References2
CVE
CVE
added 2024/11/08 12:0 a.m.49 views

CVE-2024-35410

The CVE-2024-35410 issue affects wac (commit 385e1) and is caused by a heap overflow in the interpret function (source file: /wac-asan/wa.c). Exploitation leads to Denial of Service via a specially crafted WebAssembly (wasm) file. Connected records confirm the same root cause across multiple feed...

6.2CVSS7.1AI score0.00256EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/08 12:0 a.m.11 views

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

7.5AI score0.00256EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/04/01 12:0 a.m.3 views

PT-2024-23648 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/address interpret.php" API endpoint. There is no information provided about the estimated number of potentially affected...

8.8CVSS7.2AI score0.0067EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.2 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/addressinterpret.php file...

8.8CVSS7.9AI score0.0067EPSS
Exploits1References2
Rows per page
Query Builder