Skip to content
Fencer Intel

All · julia

Newest first, late arrivals on top. Also a feed.

  1. 5.5
    CVE-2020-25663 A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  2. 5.9
    CVE-2020-1971 EDIPARTYNAME NULL pointer dereference
    Node.jsOpenSSLMySQLbitnamijulia
    EPSS 7.0% chance of exploitation in 30 days, percentile 94%
  3. 7.5
    CVE-2020-25692 A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.
    bitnamijulia
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  4. 3.3
    CVE-2020-27758 A flaw was found in ImageMagick in coders/txt.c.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  5. 3.3
    CVE-2020-27757 A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  6. 5.5
    CVE-2020-27756 In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead…
    julia
  7. 3.3
    CVE-2020-27754 In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller w…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  8. 3.3
    CVE-2020-27751 A flaw was found in ImageMagick in MagickCore/quantum-export.c.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  9. 5.5
    CVE-2020-27750 A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h.
    julia
  10. 5.5
    CVE-2020-25676 In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all fun…
    julia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  11. 3.3
    CVE-2020-25675 In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offset…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  12. 5.5
    CVE-2020-25674 WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ vi…
    julia
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  13. 3.3
    CVE-2020-25666 There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations.
    julia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  14. 5.5
    CVE-2020-25665 The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be o…
    julia
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  15. 7.8
    CVE-2020-29599 ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-pro…
    julia
    EPSS 7.5% chance of exploitation in 30 days, percentile 94%
  16. 3.3
    CVE-2020-27776 A flaw was found in ImageMagick in MagickCore/statistic.c.
    julia
  17. 3.3
    CVE-2020-27775 A flaw was found in ImageMagick in MagickCore/quantum.h.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  18. 3.3
    CVE-2020-27774 A flaw was found in ImageMagick in MagickCore/statistic.c.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  19. 3.3
    CVE-2020-27773 A flaw was found in ImageMagick in MagickCore/gem-private.h.
    julia
  20. 3.3
    CVE-2020-27772 A flaw was found in ImageMagick in coders/bmp.c.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  21. 3.3
    CVE-2020-27771 In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of…
    julia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  22. 5.5
    CVE-2020-27770 Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  23. 3.3
    CVE-2020-27767 A flaw was found in ImageMagick in MagickCore/quantum.h.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  24. 7.8
    CVE-2020-27766 A flaw was found in ImageMagick in MagickCore/statistic.c.
    julia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  25. 3.3
    CVE-2020-27765 A flaw was found in ImageMagick in MagickCore/segment.c.
    julia
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  26. 3.3
    CVE-2020-27764 In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which c…
    julia
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  27. 3.3
    CVE-2020-27763 A flaw was found in ImageMagick in MagickCore/resize.c.
    julia
  28. 5.5
    CVE-2020-27762 A flaw was found in ImageMagick in coders/hdr.c.
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  29. 3.3
    CVE-2020-27761 WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of repr…
    julia
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  30. 5.5
    CVE-2020-27760 In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a craf…
    julia
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%