Lucene search
+L

1696 matches found

Snyk
Snyk
added 2026/03/10 9:02 p.m.10 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.11 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.9 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/10 9:02 p.m.9 views

EUVD-2026-10381

ImageMagick has a Path Policy TOCTOU symlink race bypass...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.12 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.8 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/10 9:02 p.m.7 views

EUVD-2026-10382

ImageMagick has a Path Policy TOCTOU symlink race bypass...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.9 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.2CVSS5.8AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.21 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/10 9:02 p.m.8 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.2CVSS5.9AI score0.00108EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/03/10 9:02 p.m.9 views

ImageMagick has a Path Policy TOCTOU symlink race bypass

domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References4Affected Software19
NVD
NVD
added 2026/03/10 7:43 a.m.6 views

CVE-2026-28689

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...

6.3CVSS0.00108EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/10 7:43 a.m.2 views

DEBIAN-CVE-2026-28689

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...

6.3CVSS7.7AI score0.00108EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/10 6:31 a.m.6 views

CVE-2026-28689

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A time-of-check to time-of-use TOCTOU vulnerability exists where authorization for a file path is checked before the file is finally opened or used. A local attacker can exploit this...

6.3CVSS5.6AI score0.00108EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-28689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain=path authorizati...

6.3CVSS6.8AI score0.00108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.6 views

PT-2026-24616

domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/09 9:39 p.m.6 views

CVE-2026-28689

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...

6.3CVSS5.8AI score0.00108EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
added 2026/03/09 12:00 a.m.9 views

SmartGraphical: A Human-In-The-Loop Framework for Detecting Smart Contract Logical Vulnerabilities Via Pattern-Driven Static Analysis and Visual Abstraction

Smart contracts are fundamental components of blockchain ecosystems; however, their security remains a critical concern due to inherent vulnerabilities. While existing detection methodologies are predominantly syntax-oriented, targeting reentrancy and arithmetic errors, they often overlook logica...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/03/09 12:00 a.m.7 views

Vim < 9.2.0077 Heap-based Buffer Overflow (GHSA-r2gw-2x48-jj5p)

The version of Vim installed on the remote host is prior to 9.2.0077. It is, therefore, affected by a vulnerability as referenced in the GHSA-r2gw-2x48-jj5p advisory. - Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault...

7.8CVSS5.9AI score0.00177EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/09 12:00 a.m.8 views

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005927 advisory. A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest...

7.8CVSS5.8AI score0.00565EPSS
SaveExploits0References4
Rows per page
Query Builder