CVEs (35)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
4Canonical ImagemagickOpensuse+1 more10Imagemagick LeapOpensuse+7 moreMay 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. |
5Canonical ImagemagickOpensuse+2 more11Imagemagick LeapLeap+8 moreMay 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. |
5Canonical ImagemagickOpensuse+2 more11Imagemagick LeapLeap+8 moreMay 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file. |
5Canonical ImagemagickOpensuse+2 more10Imagemagick LeapOpensuse+7 moreMay 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file. |
4Canonical ImagemagickOpensuse+1 more8Imagemagick LeapOpensuse+5 moreMay 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors. |
4Canonical ImagemagickOpensuse+1 more9Imagemagick LeapOpensuse+6 moreMay 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. |
4Canonical ImagemagickOpensuse+1 more8Imagemagick LeapOpensuse+5 moreMay 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions." |
4Debian OpensuseOpensuse Project+1 more4Debian Linux LeapLeap+1 moreMay 13, 2026 Mar 15, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name. |
2Imagemagick Opensuse Project2Imagemagick LeapMay 13, 2026 Mar 2, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames. |
3Imagemagick OpensuseOpensuse Project3Imagemagick LeapLeapMay 13, 2026 Mar 2, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file. |
3Opensuse Opensuse ProjectTats3Leap LeapW3mMay 13, 2026 Jan 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag. |
3Opensuse Opensuse ProjectTats3Leap LeapW3mMay 13, 2026 Jan 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags. |
3Libtiff OpensuseOpensuse Project3Leap LibtiffOpensuseMay 13, 2026 Jan 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a craf...Show more |
3Libtiff OpensuseOpensuse Project3Leap LibtiffOpensuseMay 13, 2026 Jan 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool. |
3Kernel OpensuseOpensuse Project3Leap OpensuseUtil LinuxMay 6, 2026 Nov 9, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. |