Medium
CVE-2026-26066
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-25989
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
Medium
CVE-2026-25988
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
Medium
CVE-2026-25987
ImageMagick has a heap buffer over-read in its MAP image decoder
High
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
Medium
CVE-2026-25983
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Medium
CVE-2026-25969
Image Magick has a Memory Leak in coders/ashlar.c
High
CVE-2026-25967
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
Medium
CVE-2026-25966
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
High
CVE-2026-25965
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
Medium
CVE-2026-25898
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
Medium
CVE-2026-25897
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
Medium
CVE-2026-25799
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
Medium
CVE-2026-25798
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
Medium
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
Medium
CVE-2026-25796
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
Medium
CVE-2026-25795
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
High
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
Medium
CVE-2026-25638
ImageMagick has memory leak in msl encoder
Low
CVE-2026-23983
Apache Superset allows authenticated users to view sensitive data without explicit permissions
High
CVE-2026-23982
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
High
CVE-2026-23984
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Medium
CVE-2026-23980
Apache Superset allows privileged users to conduct error-based SQL Injection
Medium
CVE-2026-23969
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.