CVE-2018-10060

CVE-2018-10060 affects Cacti prior to 1.1.37, where the sanitize_uri function in lib/functions.php fails to reject unintended characters, enabling cross-site scripting (XSS). The issue is described across multiple sources (Cacti CVE entry, CNVD CNVD-2018-08679, Debian DLA-2965-1, and OpenVAS entr...

CVE-2018-10060

Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...

CVE-2017-10060

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web General. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (October 2017 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.171017 or 11.1.1.9.x prior to 11.1.1.9.171017. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CV...

CVE-2016-10060

CVE-2016-10060 affects ImageMagick (MagickWand) prior to version 7.0.1-10. The root cause is that the ConcatenateImages function in MagickWand/magick-cli.c does not check the return value of fputc, which can be exploited by a crafted file to trigger a denial of service (application crash). The vu...

ImageMagick Multiple Security Bypass Vulnerabilities - Mac OS X

ImageMagick is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick Multiple Security Bypass Vulnerabilities - Windows

ImageMagick is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick 7.x < 7.0.1-10 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that is 7.x prior to 7.0.1-10. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the ReadRLEImage function in rle.c due to improper validation of user-supplied input. An unauthenticated,...