Lucene search
K

19904 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 3:43 p.m.6 views

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

A crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it, leading to a UAF in ReadBlobString during further parsing...

9.8CVSS5.5AI score0.0003EPSS
Exploits0References5Affected Software19
OSV
OSV
added 2026/02/24 3:21 p.m.3 views

CVE-2026-0400

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall...

4.9CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2026/02/24 3:21 p.m.3 views

CVE-2026-0400

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall...

4.9CVSS0.0026EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/24 2:54 p.m.16 views

CVE-2026-0400

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall...

0.0026EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 2:54 p.m.16 views

CVE-2026-0400

The CVE-2026-0400 entry concerns SonicOS and is a post-authentication Format String vulnerability that can cause a firewall to crash. Affected software is SonicOS (no version details provided). Root cause: improper handling of format strings in the affected component, leading to denial of service...

4.9CVSS5.5AI score0.0026EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/24 2:54 p.m.4 views

CVE-2026-0400

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall...

5.5AI score0.0026EPSS
Exploits0References1
SonicWall
SonicWall
added 2026/02/24 11:46 a.m.15 views

SonicOS multiple post-authentication vulnerabilities

1 CVE-2026-0399 - Multiple SonicOS post-authentication Stack-based Buffer Overflow vulnerabilitiesMultiple post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.CVSS Score: 4.9 CVSS Vector:...

4.9CVSS5.9AI score0.00355EPSS
Exploits0
NVD
NVD
added 2026/02/24 2:16 a.m.4 views

CVE-2026-25983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

9.8CVSS0.0003EPSS
Exploits0References1
Snyk
Snyk
added 2026/02/24 1:41 a.m.0 views

Expired Pointer Dereference

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/02/24 1:41 a.m.4 views

CVE-2026-25983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

9.8CVSS7.8AI score0.0003EPSS
Exploits0
Snyk
Snyk
added 2026/02/24 1:41 a.m.2 views

Expired Pointer Dereference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:41 a.m.0 views

Expired Pointer Dereference

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:41 a.m.2 views

Expired Pointer Dereference

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/02/24 1:41 a.m.2 views

CVE-2026-25983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

9.8CVSS5.5AI score0.0003EPSS
Exploits0
Snyk
Snyk
added 2026/02/24 1:41 a.m.2 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:41 a.m.3 views

Expired Pointer Dereference

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.0003EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/24 1:41 a.m.19 views

CVE-2026-25983 ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

5.3CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.5 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is an operating system developed by the American company SonicWALL, specifically for use with SonicWall firewall devices. There is a security vulnerability in SonicWALL SonicOS, which stems from a format string vulnerability, potentially causing the firewall to crash...

4.9CVSS5.8AI score0.0026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.4 views

PT-2026-21633

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a specially crafted MSL script can...

9.8CVSS5.9AI score0.00064EPSS
Exploits0References23
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.5 views

PT-2026-21746

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication format string issue exists in SonicOS. This can allow a remote attacker to cause a firewall to crash. Recommendations At the moment, there is no information about a newe...

4.9CVSS5.3AI score0.0026EPSS
Exploits0References7
Rows per page
Query Builder