Known vulnerabilities in ImageMagick - page 27

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718
CWE-918 High
Available
Exploited
- 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5849 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3717
CWE-200 Low
Available
No
- 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5848 - Improper input validation
CVE-2016-3716
CWE-20 Medium
Available
No
- 17.02.2017 SB2016050301
SB2016051102
SB2016050702
and 4 more
#VU5847 - Improper input validation
CVE-2016-3715
CWE-20 Medium
Available
Exploited
- 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU5846 - Improper input validation
CVE-2016-3714
CWE-20 Critical
Available
Exploited
- 17.02.2017 SB2016042801
SB2016050601
SB2016051304
and 8 more
#VU32205 - Out-of-bounds read
CVE-2016-5687
CWE-125 High
No
No
6.9.4-3, 7.0.1-4 13.12.2016 SB2016121358
SB2016091516
#VU32204 - Improper Access Control
CVE-2016-5118
CWE-284 High
No
No
- 10.06.2016 SB2016061004
SB2016062202
SB2016061705
and 4 more
#VU32202 - Memory corruption
CVE-2016-4564
CWE-119 High
No
No
6.9.4-0, 7.0.1-2 04.06.2016 SB2016060403
SB2016121206
#VU32201 - Memory corruption
CVE-2016-4563
CWE-119 High
No
No
6.9.4-0, 7.0.1-2 04.06.2016 SB2016060402
SB2016121205
#VU32200 - Memory corruption
CVE-2016-4562
CWE-119 High
No
No
6.9.4-0, 7.0.1-2 04.06.2016 SB2016060401
SB2016121204
#VU42593 - Memory corruption
CVE-2013-4298
CWE-119 Low
No
No
- 10.09.2013 SB2012080803
#VU43758 - Improper input validation
CVE-2012-3437
CWE-20 Low
No
No
- 08.08.2012 SB2012080803
#VU44016 - Improper input validation
CVE-2012-1610
CWE-20 Medium
No
No
6.7.6-4 06.06.2012 SB2012060601
#VU44017 - Out-of-bounds read
CVE-2012-1798
CWE-125 Medium
No
No
6.7.6-3 06.06.2012 SB2012060602
#VU44019 - Out-of-bounds read
CVE-2012-0259
CWE-125 Medium
No
No
6.7.6-3 06.06.2012 SB2012060602
#VU44020 - Resource exhaustion
CVE-2012-0260
CWE-400 Medium
No
No
6.7.6-3 06.06.2012 SB2012060602


Showing elements 521 - 540 out of 536