GR
Product
GraphicsMagick
On CISA KEVExploited in the wildRansomware-linked
77
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 31Medium 34Low 4
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6395 | 9.8 | Jan 16 | The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges Affected: 7.0; 8.0; 9.0 |
| CVE-2023-5550 | 9.8 | Nov 9 | In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the… Affected: 7.0 |
| CVE-2023-34152 | 9.8 | May 30 | A vulnerability was found in ImageMagick Affected: 8.0 |
| CVE-2022-4170 | 9.8 | Dec 9 | The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and… Affected: 8.0 |
| CVE-2022-40315 | 9.8 | Sep 30 | A limited SQL injection risk was identified in the "browse list of users" site administration page Affected: 8.0 |
| CVE-2022-25648 | 9.8 | Apr 19 | The package git before 1.11.0 are vulnerable to Command Injection via git argument injection Affected: 8.0 |
| CVE-2022-45152 | 9.1 | Nov 25 | A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle Affected: 7.0 |
| CVE-2021-45079 | 9.1 | Jan 31 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual… Affected: 7.0; 8.0; 9.0 |
Showing 8
