Lucene search
K

2744 matches found

CNVD
CNVD
added 2021/09/15 12:0 a.m.21 views

ImageMagick code issue vulnerability (CNVD-2022-05854)

ImageMagick is a set of open source image processing software. ImageMagick has a code problem vulnerability, the vulnerability stems from the product policy.xml file module policy exclusion Postscript file, an attacker can use the vulnerability to cause the file can be read and write...

4.4CVSS2.1AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2021/09/13 6:15 p.m.24 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

3.6CVSS6.6AI score
Exploits0References4
OSV
OSV
added 2021/09/13 6:15 p.m.2 views

DEBIAN-CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

3.6CVSS6AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2021/09/13 6:15 p.m.19 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS0.00024EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/09/13 6:15 p.m.38 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS6.5AI score0.00024EPSS
Exploits0References5
OSV
OSV
added 2021/09/13 6:15 p.m.2 views

UBUNTU-CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS6.5AI score0.00024EPSS
Exploits0References6
Prion
Prion
added 2021/09/13 6:15 p.m.20 views

Design/Logic Flaw

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

3.6CVSS5.3AI score0.00024EPSS
Exploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2021/09/13 12:0 a.m.45 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS5.7AI score0.00024EPSS
Exploits0
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.2 views

Imagemagick Studio ImageMagick 竞争条件问题漏洞

ImageMagick is a set of open source image processing software. ImageMagick has a code problem vulnerability, the vulnerability stems from the product policy.xml file module policy exclusion Postscript file, an attacker can use the vulnerability to cause the file can be read and write...

4.4CVSS5.7AI score0.00024EPSS
Exploits0References9
CVE
CVE
added 2021/09/13 12:0 a.m.113 views

CVE-2021-39212

CVE-2021-39212 is a vulnerability in ImageMagick where Postscript files could be read or written if a module policy in policy.xml excludes them. The concrete details across connected sources show a policy-bypass issue affecting the module policy (with example policy: ) and indicate the issue is r...

4.4CVSS5.5AI score0.00024EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2021/09/13 12:0 a.m.17 views

CVE-2021-39212 Issue when Configuring the ImageMagick Security Policy

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS6.2AI score0.00024EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2021/09/13 12:0 a.m.44 views

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

4.4CVSS4.8AI score0.00024EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/09/11 12:0 a.m.4 views

PT-2021-7869 · Unknown +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.12-22 ImageMagick versions prior to 7.1.0-7 Description: The issue is related to the handling of Postscript files in ImageMagick, where these files could be read and written even when excluded by a module...

7.8CVSS5.9AI score0.6875EPSS
Exploits7References110
Debian
Debian
added 2021/09/10 12:16 p.m.40 views

[SECURITY] [DSA 4972-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2021 https://www.debian.org/security/faq -...

9.9CVSS9.5AI score0.06493EPSS
Exploits0
Debian
Debian
added 2021/09/10 12:16 p.m.29 views

[SECURITY] [DSA 4972-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2021 https://www.debian.org/security/faq -...

1.8AI score0.06493EPSS
Exploits0
OSV
OSV
added 2021/09/10 11:57 a.m.0 views

USN-5075-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

9.9CVSS7.5AI score0.06493EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2021/09/10 11:57 a.m.111 views

USN-5075-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

9.9CVSS8.6AI score0.06493EPSS
Exploits0
CNVD
CNVD
added 2021/09/08 12:0 a.m.5 views

GhostScript remote command execution vulnerability

GhostScript is an interpreter used for PostScript language and PDF files, and many software components rely on it to complete the corresponding functions, and thus will also be affected by the Ghostscript vulnerability. ghostScript remote command execution vulnerability, an attacker can use the...

2.9AI score
Exploits0
vulnersOsv
vulnersOsv
added 2021/08/25 8:52 p.m.2 views

airust (=0.1.6), font (>=0.2.0 <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.10.1 <=0.11.1)

postscript CARGO version =0.10.1, =0.2.0, =0.0.2, =0.1.0, =0.15.0, =0.1.0, =0.6.3 - text =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:GHSA-FHVC-GP6C-H2WX...

7.5CVSS7.1AI score0.00291EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2021/08/25 8:52 p.m.24 views

Read on uninitialized buffer in postscript

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS7.2AI score0.00291EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder