Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,125
Reset filtersScriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
ImageMagick has heap-based buffer overflow in UHDR encoder
ImageMagick has stack buffer overflow in MagnifyImage
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
ImageMagick has uninitialized pointer dereference in JBIG decoder
ImageMagick has stack write buffer overflow in MNG encoder
ImageMagick has heap use-after-free in the MSL encoder
ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
ImageMagick: MSL - Stack overflow in ProcessMSLScript
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.