|
198211
|
9.8 |
CRITICAL
Network
|
formcrafts
|
formcraft
|
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
|
CWE-89
SQL Injection
|
CVE-2017-13137
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198212
|
8.8 |
HIGH
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-13146
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198213
|
6.5 |
MEDIUM
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.
|
CWE-20
Improper Input Validation
|
CVE-2017-13145
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198214
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.
|
CWE-20
Improper Input Validation
|
CVE-2017-13144
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198215
|
7.5 |
HIGH
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from proces…
|
CWE-200
Information Exposure
|
CVE-2017-13143
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198216
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2017-13142
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198217
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-13141
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198218
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a P…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-13140
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198219
|
9.8 |
CRITICAL
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-13139
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198220
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted fi…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-13134
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|