Lucene search
+L

6548 matches found

Snyk
Snyk
added 2026/05/18 5:48 p.m.15 views

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.13 views

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.15 views

Improper Validation of Array Index

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.17 views

Improper Validation of Array Index

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.16 views

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.16 views

Improper Validation of Array Index

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.15 views

Improper Validation of Array Index

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.18 views

Improper Validation of Array Index

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.21 views

Improper Validation of Array Index

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.15 views

Improper Validation of Array Index

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.18 views

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 5:48 p.m.18 views

Improper Validation of Array Index

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/05/18 5:48 p.m.38 views

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

An invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References3Affected Software18
Positive Technologies
Positive Technologies
added 2026/05/18 12:00 a.m.20 views

PT-2026-41776

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An invalid connected-components:keep-top value can lead to a heap buffer over-read during the connected components operation. A heap buffer over-read occurs when...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References153
Microsoft CVE
Microsoft CVE
added 2026/05/13 8:01 a.m.15 views

jq: Embedded NUL truncates top-level jq programs loaded with -f

...

5.5CVSS5.8AI score0.00158EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.14 views

ChurchCRM 跨站请求伪造漏洞

ChurchCRM is an open-source CRM system developed for churches. Versions of ChurchCRM prior to 7.3.2 contained a cross-site request forgeing vulnerability. This vulnerability originated from a top-level cross-site GET navigation request and could potentially allow logged-in users to delete records...

8.1CVSS5.7AI score0.0012EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/11 5:18 p.m.8 views

CVE-2026-41256 jq: Embedded NUL truncates top-level jq programs loaded with -f

jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \x00 and arbitrary suffix compiles and executes as only the prefix before...

5.5CVSS6AI score
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/05/11 5:18 p.m.24 views

CVE-2026-41256

jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \x00 and arbitrary suffix compiles and executes as only the prefix before...

5.5CVSS5.9AI score0.00158EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/05/11 5:18 p.m.70 views

CVE-2026-41256 jq: Embedded NUL truncates top-level jq programs loaded with -f

jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by \x00 and arbitrary suffix compiles and executes as only the prefix before...

5.5CVSS0.00158EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/11 5:18 p.m.71 views

CVE-2026-41256

The CVE affects jq up to version 1.8.1. Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter file such as . followed by � and arbitrary suffix compiles and executes as only the prefix before the NUL, leading to a ...

5.5CVSS5.9AI score0.00158EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder