23 matches found
CVE-2025-14988
creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-01 2026-01-27 21:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgqg76iux2t 2026-01-29 05:21:33+00:00| seen|...
CVE-2020-14988
An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...
Linux Distros Unpatched Vulnerability : CVE-2017-14988
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file th...
RHEL 6 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Out-of-bounds write in the = operator function CVE-2017-9115 - In OpenEXR 2.2.0, a crafted image...
RHEL 6 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Heap-buffer-overflow in Imf25::copyIntoFrameBuffer CVE-2021-23169 - OpenEXR: Heap Overflow in...
CVE-2020-14988
creationtimestamp| type| source ---|---|--- 2021-03-11 22:54:39+00:00| seen| https://t.me/cibsecurity/24809...
CVE-2020-14988
Vulnerability: Bloomreach Experience Manager (brXM) 4.1.0–14.2.2. Affected component/script areas expose XSS via: loginpage (loginmessage), rich text editor (src attributes in HTML), translations menu (foldername), author page (link URL), and image upload with an SVG containing JavaScript. Root c...
Huawei EulerOS: Security Advisory for OpenEXR (EulerOS-SA-2020-1416)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for openexr (openSUSE-SU-2019:1954-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2019:1954-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305. This update was imported from the SUSE:SLE-15:Update update project...
CVE-2019-14988
CVE-2019-14988 is a rejected/unused candidate; refer to CVE-2019-9512 for the active entry.
SUSE SLED12 / SLES12 Security Update : openexr (SUSE-SU-2019:2014-1)
This update for openexr fixes the following issues : CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean an...
SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2019:2043-1)
This update for openexr fixes the following issues : CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean an...
SUSE-SU-2019:2043-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305...
SUSE-SU-2019:2014-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305...
CVE-2018-14988
The CVE-2018-14988 entry describes an issue in MXQ TV Box 4.4.2 where an exported Android framework broadcast receiver component (com.android.server.SystemRestoreReceiver) is accessible without permissions and can write to /cache/recovery/command to trigger boot into recovery mode. This can forma...
SUSE SLES12 Security Update : mariadb (SUSE-SU-2018:1781-2)
MariaDB was updated to 10.0.35 bsc1090518 Notable changes : PCRE updated to 8.42 XtraDB updated to 5.6.39-83.1 TokuDB updated to 5.6.39-83.1 InnoDB updated to 5.6.40 The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 MDEV-15249 - Crash in MVCC...
SUSE SLES12 Security Update : mariadb (SUSE-SU-2018:1382-1)
MariaDB was updated to 10.0.35 bsc1090518 Notable changes : - PCRE updated to 8.42 - XtraDB updated to 5.6.39-83.1 - TokuDB updated to 5.6.39-83.1 - InnoDB updated to 5.6.40 - The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 - MDEV-15249 -...
CVE-2017-14988
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...