Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2026/10/07 3:54 p.m.•22 views

CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

4CVSS5.6AI score0.00113EPSS
SaveExploits0References7
Mend
Mend
•added 2026/10/07 3:54 p.m.•11 views

CVE-2026-106580

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

4CVSS5.6AI score0.00273EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/07 3:54 p.m.•13 views

CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

4CVSS5.6AI score0.00273EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•13 views

PT-2026-107569

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description A missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that the policy should deny, which can also le...

8.2CVSS5.8AI score0.00384EPSS
SaveExploits0References86
Cvelist
Cvelist
•added 2026/08/05 8:47 p.m.•49 views

CVE-2026-71313 rclone: Local Encoding Path Traversal

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...

6.9CVSS0.00298EPSS
SaveExploits0References3
Rows per page
Query Builder