Lucene search
+L

14660 matches found

OSV
OSV
•added 2026/07/15 3:16 p.m.•15 views

DEBIAN-CVE-2026-62294

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a...

5.1CVSS5.9AI score0.00139EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•16 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•14 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•16 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•15 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•18 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•20 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•16 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•15 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•19 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•9 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the TIFF encoder when a temporary file cannot be created. An attacker can cause a small memory leak by triggering conditions where the encoder attempts to create a temporary file and...

7.5CVSS5.5AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•17 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 2:36 p.m.•18 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/15 2:20 p.m.•52 views

CVE-2026-62294

Flameshot prior to 14.0.0 is affected by a local TOCTOU race in the Open With feature. The software wrote screenshots to a predictable temporary path and followed symlinks, enabling a local unprivileged user on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through ...

5.1CVSS5.9AI score0.00139EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/15 2:20 p.m.•48 views

CVE-2026-62294 Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a...

5.1CVSS0.00139EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/15 2:20 p.m.•22 views

CVE-2026-62294 Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a...

5.1CVSS5.9AI score0.00139EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/15 2:20 p.m.•19 views

CVE-2026-62294 Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a...

5.1CVSS6.1AI score
SaveExploits0References6
OSV
OSV
•added 2026/07/15 12:18 p.m.•13 views

DEBIAN-CVE-2026-61863

ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...

7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/15 12:18 p.m.•20 views

CVE-2026-61863

ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...

7.5CVSS0.00187EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/15 11:25 a.m.•25 views

CVE-2026-61863

ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...

2.9CVSS5.4AI score0.00187EPSS
SaveExploits0References3
Rows per page
Query Builder