Lucene search
+L

241 matches found

Snyk
Snyk
added 2025/07/23 8:3 p.m.5 views

Infinite loop

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.7CVSS6.9AI score0.00707EPSS
SaveExploits1References2
AlmaLinux
AlmaLinux
added 2025/07/15 12:0 a.m.6 views

Moderate: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rexml: REXML ReDoS vulnerability CVE-2024-49761 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

8.7CVSS7.3AI score0.01429EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/07/14 7:51 p.m.6 views

CVE-2025-53101 ImageMagick has Stack Buffer Overflow in image.c

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick mogrify command, specifying multiple consecutive %d format specifiers in a filename template causes internal pointer arithmetic to...

7.4CVSS6.8AI score0.00792EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.12 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the occurrence of operations outside the buffer during the processing of PRC files. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS5.9AI score0.00211EPSS
SaveExploits0References5Affected Software3
SUSE Linux
SUSE Linux
added 2025/07/02 1:4 p.m.2 views

Security update for clamav

This update for clamav fixes the following issues: ClamAV version 1.4.3: CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability bsc1245054. CVE-2025-20234: Vulnerability in Universal Disk Format UDF processing bsc1245055. Other bugfixes: Fix a race condition between the mockup servers started...

8.1CVSS7.3AI score0.0159EPSS
SaveExploits0References10
OSV
OSV
added 2025/07/02 1:4 p.m.3 views

SUSE-SU-2025:02201-1 Security update for clamav

This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability bsc1245054. - CVE-2025-20234: Vulnerability in Universal Disk Format UDF processing bsc1245055. Other bugfixes: - Fix a race condition between the mockup servers...

9.8CVSS7.3AI score0.0159EPSS
SaveExploits0References6
OSV
OSV
added 2025/07/02 1:3 p.m.4 views

SUSE-SU-2025:02200-1 Security update for clamav

This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability bsc1245054. - CVE-2025-20234: Vulnerability in Universal Disk Format UDF processing bsc1245055...

9.8CVSS7.3AI score0.0159EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/07/01 1:55 a.m.15 views

CVE-2024-46993 Electron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...

7.3CVSS0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/02 11:4 a.m.33 views

CVE-2025-0073 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...

0.00134EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/05/26 9:30 a.m.13 views

kernel: veth: Fix use after free in XDP_REDIRECT

A use-after-free vulnerability has been identified within the vethconvertskbtoxdpbuff function of the Linux kernel's veth driver. The flaw stems from improper memory management during packet headroom expansion for XDP eXpress Data Path. Specifically, when the pskbexpandhead function allocates new...

7.8CVSS6.7AI score0.00191EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 2:54 a.m.7 views

CVE-2023-1696

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability...

7.5CVSS6.9AI score0.00447EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:40 p.m.9 views

CVE-2021-30752

Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation...

7.8CVSS6.8AI score0.01162EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:4 p.m.8 views

CVE-2021-1754

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6.6AI score0.01043EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:14 p.m.12 views

CVE-2021-1880

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6.8AI score0.00974EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:3 a.m.22 views

CVE-2019-17243

IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000003155...

7.8CVSS7AI score0.01521EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/02 5:15 p.m.14 views

CVE-2025-45800

TOTOLINK A950RG V4.1.2cu.5204B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cstemodules/global.so library, specifically in the processing of the deviceMac parameter...

9.8CVSS0.00863EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/23 12:0 a.m.36 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

2.9CVSS0.00548EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/04/23 12:0 a.m.28 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

7.5CVSS4.4AI score0.00548EPSS
SaveExploits0
OSV
OSV
added 2025/04/23 12:0 a.m.133 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

2.9CVSS6.8AI score0.00548EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.6 views

Sonos Era 300 资源管理错误漏洞

The Sonos Era 300 is a spatial audio speaker with Dolby Atmos Dolby Atmos from Sonos USA. The Sonos Era 300 suffers from a resource management error vulnerability that originates from SMB data processing without verifying object existence, which could lead to post-release reuse and remote code...

8.8CVSS8.9AI score0.00527EPSS
SaveExploits0References2
Rows per page
Query Builder