Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-1000126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exiv2 0.26 contains a Stack out of bounds read in webp parser CVE-2017-1000126 Note that Nessus relies on the presence of the package as reported by the vendor...

5.5CVSS6.8AI score0.0032EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.26 views

RHEL 6 : exiv2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp CVE-2018-12265 - Buffer overflow in th...

8.8CVSS7.6AI score0.02159EPSS
Exploits23References40
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2020:0921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.02568EPSS
Exploits8References2
OpenVAS
OpenVAS
added 2020/04/09 12:0 a.m.36 views

openSUSE: Security Advisory for exiv2 (openSUSE-SU-2020:0482-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.6AI score0.02568EPSS
Exploits8References2
Tenable Nessus
Tenable Nessus
added 2020/04/06 12:0 a.m.33 views

SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2020:0921-1)

This update for exiv2 fixes the following issues : exiv2 was updated to latest 0.26 branch, fixing bugs and security issues : CVE-2017-1000126: Fixed an out of bounds read in webp parser bsc1068873. CVE-2017-9239: Fixed a segmentation fault in TiffImageEntry::doWriteImage function bsc1040973...

8.8CVSS6.7AI score0.02568EPSS
Exploits8References34
OSV
OSV
added 2020/04/03 3:14 p.m.4 views

SUSE-SU-2020:0921-1 Security update for exiv2

This update for exiv2 fixes the following issues: exiv2 was updated to latest 0.26 branch, fixing bugs and security issues: - CVE-2017-1000126: Fixed an out of bounds read in webp parser bsc1068873. - CVE-2017-9239: Fixed a segmentation fault in TiffImageEntry::doWriteImage function bsc1040973. -...

8.8CVSS6.9AI score0.02568EPSS
Exploits8References23
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2019-2144)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.02159EPSS
Exploits13References2
CVE
CVE
added 2018/03/13 9:0 p.m.46 views

CVE-2018-1000126

Ajenti Web Panel v2 has an information disclosure vulnerability in the source code at line 176 that can enable enumeration of users/systems and exfiltration of data from /etc/ajenti/config.yml. Exploitation is described as feasible over network connectivity to the web application. The connected R...

7.5CVSS7.4AI score0.003EPSS
Exploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2017/12/11 1:49 p.m.24 views

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

5.5CVSS2.9AI score0.0032EPSS
Exploits0References1
NVD
NVD
added 2017/11/17 10:29 p.m.13 views

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

5.5CVSS6AI score0.0032EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/11/17 10:0 p.m.21 views

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

6AI score0.0032EPSS
Exploits0References2
CVE
CVE
added 2017/11/17 10:0 p.m.146 views

CVE-2017-1000126

CVE-2017-1000126 affects exiv2 0.26 with a Stack out-of-bounds read in the WebP parser. Public advisories (openSUSE, Red Hat/Nessus plugins) confirm Exiv2 0.26 as vulnerable. The issue is fixed in newer exiv2 releases (openSUSE/SLE updates reference the 0.26 line being updated to address this). I...

5.5CVSS5.7AI score0.0032EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2016/10/10 8:59 p.m.13 views

CVE-2016-1000126

Reflected XSS in wordpress plugin admin-font-editor v1.8...

6.1CVSS6AI score0.02196EPSS
Exploits2References3
Cvelist
Cvelist
added 2016/10/10 8:0 p.m.16 views

CVE-2016-1000126

Reflected XSS in wordpress plugin admin-font-editor v1.8...

6AI score0.02196EPSS
Exploits2References3
CVE
CVE
added 2016/10/10 8:0 p.m.91 views

CVE-2016-1000126

CVE-2016-1000126 is a reflected Cross-Site Scripting vulnerability affecting the WordPress plugin Admin Font Editor (versions 1.8 and earlier). The connected nuclei template confirms the issue is a reflected XSS in the plugin, enabling an attacker to execute arbitrary JavaScript in a victim’s bro...

6.1CVSS5.9AI score0.02196EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder