Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

278 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString

ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS

ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation

ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage

ImageMagick has Heap Buffer Over-Read in BilateralBlurImage

ImageMagick has heap-based buffer overflow in UHDR encoder

ImageMagick has stack write buffer overflow in MNG encoder

ImageMagick has heap use-after-free in the MSL encoder

ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder

ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer

ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder

ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.

ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

ImageMagick: MSL - Stack overflow in ProcessMSLScript

ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption

Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering

Umbraco Backoffice API Allows Unauthorized Modification of Domain Data

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder

ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

ImageMagick has a Path Policy TOCTOU symlink race bypass

MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

ImageMagick: Memory Leak in multiple coders that write raw pixel data

ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

ImageMagick has a heap buffer over-read in its MAP image decoder

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

Image Magick has a Memory Leak in coders/ashlar.c

ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write

ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

ImageMagick: Code Injection via PostScript header in ps coders

ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick has memory leak in msl encoder

ImageMagick: Possible memory leak in ASHLAR encoder

ImageMagick: Out of bounds read in multiple coders read raw pixel data

ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

HtmlSanitizer has a bypass via template tag

Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac

DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer

ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

Scan your dependencies for these CVEs