#nuget

共收录 132 条相关情报。

← 返回所有主题
安全公告2026-05-22 发布INFO

ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

CVE-2026-46692

An attacker who can connect to a `magick -distribute-cache` service can cause a heap buffer over-write in the server pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

ImageMagick: Division by Zero in binomial kernel

An user supplied large binomial kernel could result in an overflow that would lead to a division by zero.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

An incorrect fix that was applied in GHSA-5592-p365-24xh could result in a heap buffer over-write of a single byte.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog

CVE-2026-46609

### Impact Authenticated users are able to inject HTML vulnerability into an input field, which is rendered in the confi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-19 发布INFO

OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

CVE-2026-45785

### Summary The BST name-lookup loop in `DirectoryTree.TryGetDirectoryEntry` (`OpenMcdf/DirectoryTree.cs:35-46`) walks d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.

CVE-2026-46559

An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Stack overflow in fx operation

CVE-2026-46557

Due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Use-After-Free in MSL decoder.

CVE-2026-46523

A crafted MSL image can trigger a heap-use-after-free.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

CVE-2026-46522

Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

CVE-2026-46521

When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

CVE-2026-46520

When reading multiple images with different dimensions an out of bounds heap write can occur.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Policy Bypass in MNG coder could

CVE-2026-45664

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

CVE-2026-45624

When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

CVE-2026-35433

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability

CVE-2026-42899

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability

CVE-2026-32175

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Policy Bypass in PSD decoder

CVE-2026-45031

Due to a missing check in the PSD decoder it would be possible to bypass the `list-length` resource policy when decoding

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

CVE-2026-45358

An of by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

CVE-2026-45359

An invalid `connected-components:keep-top` value could result in a heap buffer over-read when performing the connected c

历史摘要 · 未重新核验 · GitHub Advisory