Schwachstellen, die jetzt zählen.

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6612-1 symfony - security update

DSA-6611-1 imagemagick - security update

ImageMagick: Mehrere Schwachstellen

DSA-6611-1 imagemagick - security update

DSA-6610-1 xen - security update

DSA-6610-1 xen - security update

openusd: openusd: Arbitrary code execution via double-free in crate file parsing

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of USDC and USDZ files. The issue results from the lack of validating the…

libwebsockets: libwebsockets: arbitrary code execution via crafted MQTT PUBACK packets

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated…

mlflow: mlflow: Information disclosure via SSRF in get-artifacts

mlflow: mlflow: Arbitrary code execution via untrusted SHAP model deserialization

mlflow: mlflow: Privilege escalation via missing authorization in request handlers

mlflow: mlflow: Privilege escalation via missing authorization in get_endpoints

mlflow: mlflow: Information disclosure via missing authorization in Tracking Server Jobs