Heist/ feed

Security feed

advisoryCISA Known Exploited Vulnerabilities

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image. CISA required action: Apply updates per vendor instructions.

ImageMagickCVE-2016-3718
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3718

ImageMagick

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2016-3718

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#3585 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryCISA Known Exploited Vulnerabilities

ImageMagick Arbitrary File Deletion Vulnerability

ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading. CISA required action: Apply updates per vendor instructions.

ImageMagickCVE-2016-3715
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3715

ImageMagick

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2016-3715

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#3584 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryCISA Known Exploited Vulnerabilities

ImageMagick Improper Input Validation Vulnerability

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

ImageMagickCVE-2016-3714
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-3714

ImageMagick

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2016-3714

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#1093 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement