Lucene search
+L

8774 matches found

NVD
NVD
•added 2026/02/24 2:16 a.m.•23 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS0.00379EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/02/24 2:16 a.m.•10 views

DEBIAN-CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/24 1:39 a.m.•50 views

CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS0.00379EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/24 1:39 a.m.•20 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.9AI score0.00379EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/02/24 1:39 a.m.•7 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0
CVE
CVE
•added 2026/02/24 1:39 a.m.•133 views

CVE-2026-25971

CVE-2026-25971 : ImageMagick’s Magick Scripting Language (MSL) parsing fails to guard against circular references between two MSLs, causing a stack overflow. Affected versions are pre-7.1.2-15 and pre-6.9.13-40; these versions include a patch. Debian/SUSE advisories list this CVE among many image...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/24 1:39 a.m.•16 views

CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS6.8AI score0.00379EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/24 1:39 a.m.•16 views

CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS6AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/02/24 1:39 a.m.•19 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/02/24 12:45 a.m.•15 views

CLEANSTART-2026-HW19594 Within HostnameError

Multiple security vulnerabilities affect the helm package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS6.6AI score0.00661EPSS
SaveExploits2References19
osv_cleanstart
osv_cleanstart
•added 2026/02/24 12:40 a.m.•15 views

CLEANSTART-2026-LM41397 node-tar is a full-featured Tar for Node

Multiple security vulnerabilities affect the npm package. node-tar is a full-featured Tar for Node. See references for individual vulnerability details...

9.8CVSS6.5AI score0.00376EPSS
SaveExploits3References5
UbuntuCve
UbuntuCve
•added 2026/02/24 12:00 a.m.•8 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•31 views

SolarWinds Serv-U code issue vulnerabilities

SolarWinds Serv-U is an FTP File Transfer Protocol server software developed by the American company SolarWinds. SolarWinds Serv-U has a code vulnerability that stems from insecure direct object references, which may lead to the execution of local code...

9.1CVSS8.2AI score0.00593EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•17 views

ImageMagick security vulnerabilities

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities. These vulnerabilities stemmed from insufficien...

9.8CVSS6.8AI score0.00379EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•3 views

CVE-2026-25971: Uncontrolled Recursion

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6.9AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•10 views

PT-2026-21631

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists where the software does not properly check for circular referenc...

9.8CVSS6.3AI score0.00494EPSS
SaveExploits0References202
Vulnrichment
Vulnrichment
•added 2026/02/20 3:47 p.m.•11 views

CVE-2026-24950 WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through = 1.0.6...

7.5CVSS6AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:47 p.m.•41 views

CVE-2026-24950 WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through = 1.0.6...

7.5CVSS0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 3:47 p.m.•41 views

CVE-2026-24950

CVE-2026-24950 affects the WordPress Authorsy plugin up to version 1.0.6. The root cause is an Insecure Direct Object Reference (IDOR) resulting from an authorization bypass driven by a user-controlled key, enabling access control bypass on resources handled by Authorsy. Public data shows CVSS v3...

7.5CVSS6AI score0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:47 p.m.•16 views

CVE-2026-22383 WordPress PawFriends - Pet Shop and Veterinary WordPress theme theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a...

7.5CVSS6AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder