Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 07:16:36 +0000 cnvd-2017-33324 https://cve.radiocsirt.org/vuln/cnvd-2017-33324 cnvd-2017-33324 https://cve.radiocsirt.org/vuln/cnvd-2017-33324 EUVD-2026-78179 https://cve.radiocsirt.org/vuln/euvd-2026-78179 EUVD-2026-78179 https://cve.radiocsirt.org/vuln/euvd-2026-78179 fkie_cve-2017-14650 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14650 <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-14650 GHSA-fxvw-26c8-9g9m https://cve.radiocsirt.org/vuln/ghsa-fxvw-26c8-9g9m <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> https://cve.radiocsirt.org/vuln/ghsa-fxvw-26c8-9g9m gsd-2017-14650 https://cve.radiocsirt.org/vuln/gsd-2017-14650 gsd-2017-14650 https://cve.radiocsirt.org/vuln/gsd-2017-14650 UBUNTU-CVE-2017-14650 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-14650 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-horde-image</p> <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-horde-image</p> <p>A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-14650