Vulnerabilities (CVE)

Total 398899 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-12668 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
CVE-2017-12667 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.
CVE-2017-12666 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.
CVE-2017-12665 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.
CVE-2017-12664 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.
CVE-2017-12663 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c.
CVE-2017-12662 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c.
CVE-2017-12655 1 Nexusphp Project 1 Nexusphp 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.
CVE-2017-12654 1 Imagemagick 1 Imagemagick 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file.
CVE-2017-12653 1 360totalsecurity 1 360 Total Security 2026-06-17 6.8 MEDIUM 7.8 HIGH
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory.
CVE-2017-12652 2 Libpng, Netapp 2 Libpng, Active Iq Unified Manager 2026-06-17 7.5 HIGH 9.8 CRITICAL
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
CVE-2017-12651 1 Loginizer 1 Loginizer 2026-06-17 6.8 MEDIUM 8.8 HIGH
Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked.
CVE-2017-12650 1 Loginizer 1 Loginizer 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.
CVE-2017-12649 1 Liferay 1 Liferay Portal 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.
CVE-2017-12648 1 Liferay 1 Liferay Portal 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.
CVE-2017-12647 1 Liferay 1 Liferay Portal 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.
CVE-2017-12646 1 Liferay 1 Liferay Portal 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.
CVE-2017-12645 1 Liferay 1 Liferay Portal 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
CVE-2017-12644 1 Imagemagick 1 Imagemagick 2026-06-17 6.8 MEDIUM 8.8 HIGH
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.
CVE-2017-12643 2 Debian, Imagemagick 2 Debian Linux, Imagemagick 2026-06-17 7.1 HIGH 6.5 MEDIUM
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.