Lucene search
+L

778 matches found

Snyk
Snyk
•added 2026/07/11 2:29 p.m.•17 views

Unchecked Return Value

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•16 views

Unchecked Return Value

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•15 views

Unchecked Return Value

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•15 views

Unchecked Return Value

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•17 views

Unchecked Return Value

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•15 views

Unchecked Return Value

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•15 views

Unchecked Return Value

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•15 views

Unchecked Return Value

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 2:29 p.m.•25 views

Unchecked Return Value

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/11 2:16 p.m.•15 views

UBUNTU-CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/07/11 2:16 p.m.•21 views

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

7.5CVSS5.7AI score0.00266EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/11 1:01 p.m.•13 views

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

6.3CVSS5.8AI score0.00266EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/11 1:01 p.m.•20 views

CVE-2026-61857 ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

6.3CVSS6.1AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/07/11 1:01 p.m.•27 views

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/11 1:01 p.m.•15 views

CVE-2026-61857 ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

6.3CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/11 12:00 a.m.•1 views

CVE-2026-61857: Unchecked Return Value

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/25 7:00 p.m.•30 views

CVE-2026-44990

A flaw was found in the sanitize-html library. Under its default configuration, an attacker can embed malicious content within a disallowed xmp element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting XSS. Successful...

9.3CVSS6.3AI score0.00695EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/06/23 1:25 p.m.•20 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. CVE-2026-33901:...

8.7CVSS6.1AI score0.01934EPSS
SaveExploits4References116
OSV
OSV
•added 2026/06/23 1:25 p.m.•15 views

SUSE-SU-2026:2580-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. -...

7.5CVSS6.2AI score0.01934EPSS
SaveExploits4References59
OSV
OSV
•added 2026/06/16 1:45 p.m.•11 views

GHSA-WJQC-6W8F-H24C pypdf: Manipulated XMP metadata streams can exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. Patches This has been fixed in pypdf==6.12.1. Workarounds If you cannot upgrade yet, consider applying the change...

6.9CVSS5.9AI score0.00181EPSS
SaveExploits0References5
Rows per page
Query Builder