Known vulnerabilities in ImageMagick - page 15

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 570
Public exploits: 11
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 570 known vulnerabilities: 1 critical, 85 high, 292 medium, 192 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38331 - Out-of-bounds read
CVE-2017-14248
CWE-125 Medium
No
No
- 11.09.2017 SB2017082320
#VU38332 - Divide By Zero
CVE-2017-14249
CWE-369 Medium
No
No
- 11.09.2017 SB2017082320
#VU38356 - Improper input validation
CVE-2017-14174
CWE-20 Medium
No
No
- 07.09.2017 SB2017090730
SB2018010545
SB2018010437
#VU38360 - Resource exhaustion
CVE-2017-14137
CWE-400 Medium
No
No
- 05.09.2017 SB2017080407
#VU38361 - Improper input validation
CVE-2017-14139
CWE-20 Medium
No
No
- 05.09.2017 SB2017080503
SB2019123157
SB2019123158
#VU38429 - Reachable Assertion
CVE-2017-13658
CWE-617 Medium
No
No
- 24.08.2017 SB2017080503
#VU38444 - Missing release of memory after effective lifetime
CVE-2017-13059
CWE-401 Medium
No
No
- 22.08.2017 SB2017082210
#VU38445 - Missing release of memory after effective lifetime
CVE-2017-13060
CWE-401 Medium
No
No
- 22.08.2017 SB2017080407
#VU38446 - Improper input validation
CVE-2017-13061
CWE-20 Medium
No
No
- 22.08.2017 SB2017080407
SB2018010545
SB2018010437
#VU38447 - Missing release of memory after effective lifetime
CVE-2017-13062
CWE-401 Medium
No
No
- 22.08.2017 SB2017082210
SB2018010545
SB2018010437
#VU38561 - Improper input validation
CVE-2017-12663
CWE-20 High
No
No
- 07.08.2017 SB2017080503
#VU38562 - Improper input validation
CVE-2017-12664
CWE-20 High
No
No
- 07.08.2017 SB2017080503
#VU38563 - Improper input validation
CVE-2017-12665
CWE-20 High
No
No
- 07.08.2017 SB2017080503
#VU38565 - Improper input validation
CVE-2017-12668
CWE-20 High
No
No
- 07.08.2017 SB2017080503
#VU38570 - Improper input validation
CVE-2017-12674
CWE-20 Medium
No
No
- 07.08.2017 SB2017080503
#VU38592 - Allocation of Resources Without Limits or Throttling
CVE-2017-12563
CWE-770 Medium
No
No
- 05.08.2017 SB2017080503
SB2018010545
SB2018010437
#VU38593 - Improper input validation
CVE-2017-12564
CWE-20 Medium
No
No
- 05.08.2017 SB2017080503
#VU38594 - Improper input validation
CVE-2017-12565
CWE-20 Medium
No
No
- 05.08.2017 SB2017080503
#VU38595 - Improper input validation
CVE-2017-12566
CWE-20 Medium
No
No
- 05.08.2017 SB2017080503
#VU38604 - Improper input validation
CVE-2017-12418
CWE-20 Medium
No
No
- 04.08.2017 SB2017080407


Showing elements 281 - 300 out of 570