Lucene search
+L

12711 matches found

Snyk
Snyk
•added 2026/10/25 2:48 p.m.•6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•6 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the -set profile process. An attacker can exhaust system memory and cause a denial of service by inducing a user to process images with the -set profile option. Remediation A fix was...

4.8CVSS5.7AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/25 2:16 p.m.•12 views

DEBIAN-CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/25 2:16 p.m.•9 views

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS0.00111EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/25 2:16 p.m.•8 views

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/25 2:10 p.m.•11 views

CVE-2026-116156

A flaw was found in ImageMagick. Improper cleanup during the processing of the -set profile option can lead to a Denial of Service DoS caused by a memory leak. By convincing a user or automated workflow to process images with this option enabled, an attacker can exhaust system memory resources an...

4.8CVSS5.8AI score0.00111EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/25 1:20 p.m.•12 views

CVE-2026-116156

ImageMagick versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a memory leak due to a missing cleanup mechanism when utilizing the -set profile option. A local attacker who can influence a user to process specifically crafted images may trigger this leak, potentially leading to...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/25 1:20 p.m.•10 views

CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/25 1:20 p.m.•4 views

CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/25 1:20 p.m.•10 views

EUVD-2026-109417

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/25 1:20 p.m.•24 views

CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS0.00111EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/25 1:20 p.m.•12 views

CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•8 views

PT-2026-122997

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/25 12:00 a.m.•5 views

Red Hat: CVE-2026-116156: ImageMagick: ImageMagick: Denial of Service via memory leak in -set profile option

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/24 12:00 a.m.•14 views

PT-2026-122668

Name of the Vulnerable Software and Affected Versions Unitree Robotics Unitree Go2 versions prior to 1.1.11.5 Description An OS command injection flaw exists in the chat go component. A remote attacker can execute arbitrary operating system commands by manipulating the Value argument within the s...

10CVSS8.8AI score0.01377EPSS
SaveExploits0References14
Github Security Blog
Github Security Blog
•added 2026/10/23 6:31 p.m.•9 views

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

Summary /api/filetree/authFilePublishAccess is registered with CheckAuth only and is reachable anonymously. It never sets a failure code, so its outcome is signalled entirely by the response message and by whether a Set-Cookie header is present. Those two signals differ across access tiers, which...

6.9CVSS6.1AI score0.00343EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/23 6:31 p.m.•12 views

GHSA-4PJG-X8QJ-33J5 SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

Summary /api/filetree/authFilePublishAccess is registered with CheckAuth only and is reachable anonymously. It never sets a failure code, so its outcome is signalled entirely by the response message and by whether a Set-Cookie header is present. Those two signals differ across access tiers, which...

5.8CVSS6.1AI score0.00343EPSS
SaveExploits0References6
Rows per page
Query Builder