CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116149 | HIGH | 8.1 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the h… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116148 | LOW | 3.6 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116147 | LOW | 3.7 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116146 | LOW | 3.7 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that … |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116145 | LOW | 3.9 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116144 | LOW | 3.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG deco… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116143 | LOW | 3.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116142 | LOW | 3.3 | ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116141 | MEDIUM | 5.3 | ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows a… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116140 | LOW | 3.3 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which … |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116139 | MEDIUM | 5.4 | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows aut… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116053 | MEDIUM | 5.3 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the funct… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116052 | MEDIUM | 4.3 | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is a… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116137 | LOW | 3.7 | adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade th… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116136 | MEDIUM | 5.9 | ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116073 | MEDIUM | 6.5 | Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116072 | MEDIUM | 5.4 | Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that all… |
T1190
T1203
|
|
2026-10-25 |
| CVE-2026-116071 | MEDIUM | 5.9 | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-forc… |
T1190
T1059
+1
|
|
2026-10-25 |
| CVE-2026-116070 | MEDIUM | 6.5 | Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/co… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-116069 | MEDIUM | 6.5 | NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that all… |
T1078
T1548
|
|
2026-10-25 |