Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
ImageMagick has a heap buffer over-read in its MAP image decoder
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Image Magick has a Memory Leak in coders/ashlar.c
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
ImageMagick: Code Injection via PostScript header in ps coders
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
ImageMagick has memory leak in msl encoder
Apache Superset allows authenticated users to view sensitive data without explicit permissions
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Apache Superset allows privileged users to conduct error-based SQL Injection
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.