USN-5974-1: GraphicsMagick vulnerabilities

It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image files, which could lead to a heap buffer overflow. If a user or automated system were tricked into processing a specially crafted TGA image file, an attacker could possibly use this issue to...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory. It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image files, which could lead...

CVE-2023-1270

creationtimestamp| type| source ---|---|--- 2023-03-08 16:23:30+00:00| seen| https://t.me/cibsecurity/59669...

CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270

CVE-2023-1270 affects BTCPayServer/btcpayserver prior to 1.8.3 with Cross-site Scripting (XSS) via the Display title input in the client/server workflow. PoCs show injecting {{alert(document.location)}} can execute scripts, indicating a client‑side script injection vulnerability. Remediation freq...

K29042031: Multiple Spring Framework vulnerabilities

Security Advisory Description On April 5th, 2018, three new vulnerabilities were published in the popular Java web framework called Spring. Details on these vulnerabilities and exploit code are not yet available, and mitigation details may change if and when the exploit code is available. You can...

SUSE CVE-2004-1270

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers...

SUSE CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

Mageia: Security Advisory (MGASA-2022-0446)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5288-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5288-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 25, 2022 https://www.debian.org/security/faq -...

Debian DSA-5288-1 : graphicsmagick - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5288 advisory. - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. CVE-2022-1270 Note that Nessus has not tested for this issue but has instead relied only on the...

Debian dla-3200 : graphicsmagick - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3200 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3200-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3200-1] graphicsmagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3200-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 21, 2022 https://wiki.debian.org/LTS -...

CVE-2022-1270

creationtimestamp| type| source ---|---|--- 2022-09-29 00:34:26+00:00| seen| https://t.me/cibsecurity/50622...

CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

UBUNTU-CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

CVE-2022-1270

CVE-2022-1270 affects GraphicsMagick and involves a heap buffer overflow when parsing MIFF images. The issue is triggered by processing crafted MIFF files, with potential consequences including denial of service and, per Debian advisory wording, possible arbitrary code execution on affected syste...