GR
Product
graphicsmagick
On CISA KEVExploited in the wildRansomware-linked
9,995
CVEs
123
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 414High 68Medium 17Low 1
Watch
Add graphicsmagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62799 | 9.8 | Feb 3 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ) Affected: 11.0; 12.0; 13.0 |
| CVE-2025-68670 | 9.8 | Jan 27 | xrdp is an open source RDP server Affected: 11.0 |
| CVE-2025-68615 | 9.8 | Dec 23 | net-snmp is a SNMP application library, tools and daemon Affected: 11.0 |
| CVE-2014-7210 | 9.8 | Jun 26 | pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user Affected: 7.0 |
| CVE-2025-2291 | 9.8 | Apr 16 | Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired… Affected: 11.0 |
| CVE-2025-0838 | 9.8 | Feb 21 | There exists a heap buffer overflow vulnerable in Abseil-cpp Affected: 11.0 |
| CVE-2024-46981 | 9.8 | Jan 6 | Redis' Lua library commands may lead to remote code execution Affected: 11.0 |
| CVE-2024-47606 | 9.8 | Dec 12 | GStreamer is a library for constructing graphs of media-handling components Affected: 11.0 |
| CVE-2024-52316 | 9.8 | Nov 18 | Unchecked Error Condition vulnerability in Apache Tomcat Affected: 11.0 |
| CVE-2024-49369 | 9.8 | Nov 12 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting Affected: 11.0 |
| CVE-2024-52533 | 9.8 | Nov 11 | gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character Affected: 11.0 |
| CVE-2024-47175 | 9.8 | Sep 26 | CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support Affected: 11.0 |
| CVE-2024-25714 | 9.8 | Feb 11 | In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first… Affected: 11.0; 12.0 |
| CVE-2024-25189 | 9.8 | Feb 8 | libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel Affected: 10.0 |
| CVE-2024-0808 | 9.8 | Jan 24 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file Affected: 11.0 |
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: 10.0 |
| CVE-2023-51714 | 9.8 | Dec 24 | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2 Affected: 10.0 |
| CVE-2023-46850 | 9.8 | Nov 11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer Affected: 12.0 |
| CVE-2023-5730 | 9.8 | Oct 25 | Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 Affected: 10.0; 11.0 |
| CVE-2023-5176 | 9.8 | Sep 27 | Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 Affected: 10.0; 11.0; 12.0 |
| CVE-2023-42464 | 9.8 | Sep 20 | A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17 Affected: 10.0; 11.0 |
| CVE-2019-19450 | 9.8 | Sep 20 | paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML… Affected: 10.0 |
| CVE-2023-40569 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 10.0 |
| CVE-2023-40567 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 10.0 |
| CVE-2023-40186 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 10.0 |
| CVE-2023-39352 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 10.0 |
| CVE-2023-39355 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 10.0 |
| CVE-2023-41361 | 9.8 | Aug 29 | An issue was discovered in FRRouting FRR 9.0 Affected: 10.0 |
| CVE-2022-48565 | 9.8 | Aug 22 | An XML External Entity (XXE) issue was discovered in Python through 3.9.1 Affected: 10.0 |
| CVE-2022-48174 | 9.8 | Aug 22 | There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35 Affected: 11.0 |
| CVE-2023-3824 | 9.8 | Aug 11 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may… Affected: 10.0 |
| CVE-2023-4056 | 9.8 | Aug 1 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13 Affected: 10.0; 11.0; 12.0 |
| CVE-2023-28879 | 9.8 | Mar 31 | In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c Affected: 10.0; 11.0 |
| CVE-2022-23125 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2022-23124 | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2022-23123 | 9.8 | Mar 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2022-23122 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2022-23121 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2022-0194 | 9.8 | Mar 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk Affected: 10.0; 11.0 |
| CVE-2023-27372 | 9.8 | Feb 28 | SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled Affected: 11.0 |
| CVE-2022-48337 | 9.8 | Feb 20 | GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function… Affected: 11.0 |
| CVE-2022-4338 | 9.8 | Jan 10 | An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch Affected: 11.0 |
| CVE-2022-4337 | 9.8 | Jan 10 | An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch Affected: 11.0 |
| CVE-2022-41838 | 9.8 | Dec 22 | A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2 Affected: 11.0 |
| CVE-2022-41837 | 9.8 | Dec 22 | An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2 Affected: 11.0 |
| CVE-2022-41794 | 9.8 | Dec 22 | A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0 Affected: 11.0 |
| CVE-2022-41639 | 9.8 | Dec 22 | A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0 Affected: 11.0 |
| CVE-2022-47629 | 9.8 | Dec 20 | Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser Affected: 10.0; 11.0 |
| CVE-2022-23537 | 9.8 | Dec 20 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: 10.0 |
| CVE-2022-23484 | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) Affected: 11.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
