23385 matches found
CVE-2026-40311
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
CVE-2026-39963
creationtimestamp| type| source ---|---|--- 2026-04-13 22:15:38+00:00| published-proof-of-concept| https://github.com/s9y/Serendipity/security/advisories/GHSA-4m6c-649p-f6gf 2026-04-15 04:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2bnxkza2k...
CVE-2026-30997
creationtimestamp| type| source ---|---|--- 2026-04-13 22:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfuhwufvs25 2026-05-29 10:04:33+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmybw5zfqs2r 2026-05-29 10:04:34+00:00| seen|...
CVE-2026-40311
CVE-2026-40311 affects ImageMagick. A heap-use-after-free occurs when reading/printing values from an invalid XMP profile in versions below 6.9.13-44 and 7.1.2-19; this has been fixed in 6.9.13-44 and 7.1.2-19. Remediation: upgrade to the fixed versions. The CVE describes a crash scenario; exploi...
CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
CVE-2026-40311
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
CVE-2026-40311
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...
EUVD-2025-209427
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2025-66769
creationtimestamp| type| source ---|---|--- 2026-04-13 21:27:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfsmitrwj2w...
CVE-2025-51414
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2026-6200
creationtimestamp| type| source ---|---|--- 2026-04-13 20:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqpqpt2s2r 2026-04-13 21:22:51+00:00| published-proof-of-concept| Telegram/E9uORDS5VkHsQsN2ALVesQEvtj4s64kK7xuccSs6pLn-94...
CVE-2026-6197
creationtimestamp| type| source ---|---|--- 2026-04-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqgs65ao2t 2026-04-13 21:22:40+00:00| seen| Telegram/c7uZKOPwVy2hcS0GAJgtvZD1v9yKI-NyzhYNMP5jQugHxE...
CVE-2026-6202
creationtimestamp| type| source ---|---|--- 2026-04-13 20:11:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfofgbqjr2w...
CVE-2026-6201
creationtimestamp| type| source ---|---|--- 2026-04-13 20:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfo7vg7zr2w...
CVE-2026-40040
creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjflocwdbf2s 2026-04-13 20:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpjenntu2m 2026-04-13 21:22:40+00:00| seen|...
EUVD-2025-209423
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...