27 matches found
CVE-2018-11722
WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UCKEY' is hard coded...
CVE-2018-11722
CVE-2018-11722 affects WUZHI CMS 4.1.0 with a SQL Injection in api/uc.php driven by the 'code' parameter due to a hard-coded UC_KEY. The vulnerability is described across multiple datasources as enabling arbitrary SQL commands; CVSS metrics indicate network-level access, low attack complexity, an...
openSUSE Security Update : GraphicsMagick (openSUSE-2018-166)
This update for GraphicsMagick fixes the following issues : - The dcm coder was updated to newest code, covering all currently known security issues. Security issues fixed : - CVE-2017-17502: ReadCMYKImage in ImportCMYKQuantumType had a heap-based buffer over-read via a crafted file. boo1073081 -...
CVE-2017-11722
The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...
CVE-2017-11722
CVE-2017-11722 affects GraphicsMagick 1.3.26 and is caused by a control-flow discrepancy in the WriteOnePNGImage function (coders/png.c). A crafted PNG can trigger an out-of-bounds read, leading to an application crash and denial of service. The vulnerability stems from a logging statement execut...
w3m arbitrary code execution vulnerability (CNVD-2016-11722)
w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...
SuSE9 Security Update : vim and gvim (YOU Patch Number 11722)
This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...