Vulnerabilities

TI-2015-03008 CVE-2015-3405 · GHSA-wwx9-mwhp-g8mc

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate…

MEDIUM 41

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05292 Published 2017-08-09 Partial fix CWE-331

TI-2014-08024 CVE-2014-9851 · GHSA-5277-5jxm-2v8h

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

LOW 39

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03702 Published 2017-03-20 Will not fix CWE-20

TI-2014-08023 CVE-2014-9850 · GHSA-79f8-5j4j-fpx5

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

LOW 39

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03618 Published 2017-03-20 Will not fix CWE-399

TI-2014-08022 CVE-2014-9849 · GHSA-9v2h-5gfh-h2p2

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

LOW 39

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03618 Published 2017-03-20 Will not fix CWE-400

TI-2014-08021 CVE-2014-9848 · GHSA-6rjh-r7gx-7pfh

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

LOW 39

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03734 Published 2017-03-20 Will not fix CWE-399

TI-2014-08020 CVE-2014-9847 · GHSA-pw5h-pj9g-x2j5

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

MEDIUM 49

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04584 Published 2017-03-20 Will not fix CWE-119

TI-2014-08019 CVE-2014-9846 · GHSA-fx7w-v837-p52c

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9…

MEDIUM 50

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04852 Published 2017-03-20 Will not fix CWE-119

TI-2014-08018 CVE-2014-9845 · GHSA-768x-wc78-6cc7

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause…

LOW 29

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01946 Published 2017-03-20 Will not fix CWE-119

TI-2014-08017 CVE-2014-9844 · GHSA-689w-wq5r-v53p

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers…

LOW 29

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02054 Published 2017-03-20 Will not fix CWE-125

TI-2014-08016 CVE-2014-9843 · GHSA-8x8p-5g6g-p65m

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote…

MEDIUM 49

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03933 Published 2017-03-20 Will not fix CWE-119

TI-2014-08015 CVE-2014-9842 · GHSA-5wj2-97hm-rjxp

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows…

LOW 39

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03618 Published 2017-03-20 Will not fix CWE-400

TI-2014-08014 CVE-2014-9841 · GHSA-78wm-gxqj-pr35

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers…

MEDIUM 49

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03933 Published 2017-03-20 Will not fix CWE-388

TI-2014-03483 CVE-2014-4258 · GHSA-x2cv-5mxq-rr26

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and…

LOW 35

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors relat…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03511 Published 2014-07-17 Partial fix

Vulnerabilities

Filters