8747 matches found
CVE-2020-2000
CVE-2020-2000 is a command-injection and memory-corruption vulnerability in Palo Alto Networks PAN-OS management web interface. The issue affects PAN-OS versions prior to fixed releases: 8.1.16, 9.0.10, 9.1.4, and 10.0.1. It requires authenticated administrators and can disrupt system processes a...
PAN-OS: OS command injection and memory corruption vulnerability
An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt system processes and potentially execute arbitrary code and OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than...
CVE-2000-1252
This CVE entry is rejected; the candidate number was withdrawn by its CNA.
CVE-2000-1250
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2000-1248
CVE-2000-1248 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2000-0803 affecting package groff 1.22.3-5
CVE-2000-0803 affecting package groff 1.22.3-5. A patched version of the package is available...
Microsoft Windows XP Source Code Reportedly Leaked Online
Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...
USN-4497-1: OpenJPEG vulnerabilities
It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. CVE-2016-9112 It was discovered that OpenJPEG did not properly handle certain input. If OpenJPEG were supplied with specially crafted input, it...
SUSE-SU-2020:2057-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues: - Add 0019-FLI-overflow-error-fix-and-testcase.patch Fixes CVE-2016-0775, bsc965582 - Add 0020-Fix-OOB-reads-in-FLI-decoding.patch Fixes CVE-2020-10177, bsc1173413 - Add 0021-Fix-bounds-overflow-in-JPEG-2000-decoding.patch Fixes...
Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Sterling Connect:Express for Unix
Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling Connect:Express for UNIX. IBM Sterling Connect:Express for UNIX has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2000-1254 DESCRIPTION: OpenSSL...
Exploit for CVE-2017-0144
This is a PoC exploit for CVE-2017-0144, a remote code execution vulnerability in Windows. The exploit targets Windows 2000 and later versions. It does not require Python installation, as it is built with Pyinstaller. The exploit implements a few options, such as username/password specification a...
DEBIAN-CVE-2020-10994
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...
PYSEC-2020-79
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...
PT-2020-12478 · Pillow +2 · Pillow +2
Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.1.0 Description: The issue is related to multiple out-of-bounds reads that can occur via a crafted JP2 file in the libImaging/Jpeg2KDecode.c module. Recommendations: For Pillow versions prior to 7.1.0, update to...
exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...