Lucene search
+L

62843 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/14 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-33908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the...

7.5CVSS6.6AI score0.0051EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/04/13 11:25 p.m.•20 views

SUSE CVE-2026-40021

Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/configuration/layouts.htmllayout-list , in versions before 3.3.0, fail to sanitize characters forbidden by the XML 1.0...

6.3CVSS5.7AI score0.00772EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/04/13 11:25 p.m.•21 views

SUSE CVE-2026-40023

Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx11xml11XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/charsets in log messages, NDC, and MDC property keys and values, producin...

5.3CVSS5.8AI score0.00499EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/04/13 10:27 p.m.•20 views

CVE-2026-33908

A flaw was found in ImageMagick, a free and open-source software for editing and manipulating digital images. When ImageMagick processes an XML file with deeply nested structures, the DestroyXMLTree function, which frees memory, is executed recursively without a depth limit. This can lead to the...

7.5CVSS6.8AI score0.0051EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2026/04/13 10:16 p.m.•21 views

DEBIAN-CVE-2026-33908

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...

7.5CVSS6.6AI score0.0051EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/13 10:16 p.m.•20 views

CVE-2026-33908

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...

7.5CVSS6.6AI score0.0051EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•29 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•15 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow when parsing XML files. An attacker can cause a denial of service by providing a specially crafted XML file that triggers a heap buffer overflow. Remediation A fix was pushed into the master branch but not yet...

6.9CVSS6AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•17 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•21 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•13 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•22 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•21 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•18 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•20 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•15 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•17 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•17 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•16 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•11 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the DestroyXMLTree function. An attacker can cause the application to exhaust stack memory and terminate unexpectedly by submitting an XML file with deeply nested structures. Remediation A fix was pushed into t...

8.7CVSS7AI score0.0051EPSS
SaveExploits0References2
Rows per page
Query Builder