Lucene search
+L

38096 matches found

Snyk
Snyk
•added 2025/12/30 11:08 p.m.•9 views

Uncontrolled Recursion

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.2CVSS6.8AI score0.00188EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/30 11:08 p.m.•11 views

Uncontrolled Recursion

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.2CVSS6.8AI score0.00188EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/30 11:08 p.m.•9 views

Uncontrolled Recursion

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.2CVSS6.8AI score0.00188EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/30 11:08 p.m.•8 views

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.2CVSS6.8AI score0.00188EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/30 11:08 p.m.•10 views

Uncontrolled Recursion

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.2CVSS6.8AI score0.00188EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/12/30 10:54 p.m.•15 views

ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

Summary Using Magick to read a malicious SVG file resulted in a DoS attack. Details bt obtained using gdb: 4 0x0000555555794c9c in ResizeMagickMemory memory=0x7fffee203800, size=391344 at MagickCore/memory.c:1443 5 0x0000555555794e5a in ResizeQuantumMemory memory=0x7fffee203800, count=48918,...

7.5CVSS7.3AI score0.00647EPSS
SaveExploits1References4Affected Software17
OSV
OSV
•added 2025/12/30 10:54 p.m.•9 views

GHSA-P27M-HP98-6637 ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

Summary Using Magick to read a malicious SVG file resulted in a DoS attack. Details bt obtained using gdb: 4 0x0000555555794c9c in ResizeMagickMemory memory=0x7fffee203800, size=391344 at MagickCore/memory.c:1443 5 0x0000555555794e5a in ResizeQuantumMemory memory=0x7fffee203800, count=48918,...

5.3CVSS7.2AI score0.00647EPSS
SaveExploits1References4
OSV
OSV
•added 2025/12/30 8:03 p.m.•10 views

SUSE-SU-2026:20054-1 Security update for capstone

This update for capstone fixes the following issues: - CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow bsc1255309. - CVE-2025-68114: unchecked vsnprintf return value can lead to a stack buffer overflow bsc1255310...

9.8CVSS6AI score0.00235EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/30 5:15 p.m.•11 views

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS0.00188EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2025/12/30 5:15 p.m.•7 views

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS6.6AI score0.00188EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/30 5:15 p.m.•10 views

UBUNTU-CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS5.9AI score0.00188EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/30 4:50 p.m.•3 views

CVE-2025-68950 Magick's failure to limit MVG mutual references forming a loop

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

4CVSS6.4AI score0.00188EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/12/30 4:50 p.m.•11 views

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS6.9AI score0.00188EPSS
SaveExploits0
OSV
OSV
•added 2025/12/30 4:50 p.m.•8 views

CVE-2025-68950 Magick's failure to limit MVG mutual references forming a loop

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

4CVSS6.8AI score
SaveExploits0References4
CVE
CVE
•added 2025/12/30 4:50 p.m.•93 views

CVE-2025-68950

ImageMagick (affected component: MVG handling) is vulnerable to a DoS due to Magick failing to detect circular references between two MVGs, causing a stack overflow when reading an MVG file. The issue is fixed in version 7.1.2-12; upgrade to 7.1.2-12 or later to remediate.

6.2CVSS6.4AI score0.00188EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/12/30 4:50 p.m.•52 views

CVE-2025-68950 Magick's failure to limit MVG mutual references forming a loop

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

4CVSS0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/30 4:15 p.m.•15 views

CVE-2025-15255

A vulnerability was determined in Tenda W6-S 1.0.0.4510. This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

9.3CVSS6.5AI score0.04652EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/30 4:15 p.m.•17 views

CVE-2025-15255

A vulnerability was determined in Tenda W6-S 1.0.0.4510. This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

10CVSS0.04652EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/12/30 4:02 p.m.•10 views

CVE-2025-15255

A vulnerability was determined in Tenda W6-S 1.0.0.4510. This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

10CVSS6.2AI score0.04652EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/30 4:02 p.m.•10 views

CVE-2025-15255 Tenda W6-S R7websSsecurityHandler httpd stack-based overflow

A vulnerability was determined in Tenda W6-S 1.0.0.4510. This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

10CVSS9.4AI score0.04652EPSS
SaveExploits1References5
Rows per page
Query Builder