CVE-2019-8951: URL Redirection to Untrusted Site

An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 vulnerable versions: 3.10; 3.20; 3.21; 3.50;...

CVE-2019-8952: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 vulnerable...

Fedora Update for openjpeg2 FEDORA-2018-87c15da28c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Use-After-Free

JasPer is vulnerable to a use-after-free attacks. Incorrect decoding of certain JPEG 2000 image files allow remote attackers to cause application crash resulting in denial of service conditions. Affected component is JPEG 2000 Image Handler...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause out-of-bounds read and application crash via a crafted JPEG 2000 image. Affected by this issue is the function jpcpinextcprl of the component JPEG 2000 Image Handler...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause an application crash via resourcememory exhaustion. Affected is the function jasiccprofcreatefrombuf of the component JPEG 2000 Image Handler...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause invalid reads and application crash via a crafted JPEG 2000 image. This issue affects the function jasmatrixclip of the file jasseq.c of the component JPEG 2000 Image Handler...

Denial Of Service (DoS)

Jasper is vulnerable to denial of serviceDoS attacks. An attacker could execute arbitrary code or cause an application crash via a crafted color profile in a JPEG 2000 image leading to a double free vulnerability. Affected function is jasiccattrvaldestroy...

Heap-Based Buffer Overflow

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly,...

Denial Of Service (DoS)

jasper is vulnerable to denial of service. A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Memory Corruption

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

Denial Of Service (DoS) Or Remote Code Execution (RCE)

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service. A NULL pointer dereference in JP2 encoder allows an attacker to crash the process via a malicious JPEG 2000 image...

The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 2000 Standard and Premium Edition

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN 2000 Standard and Premium Edition The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The dates and milestones...

CVE-2018-2000

CVE-2018-2000 concerns cross-site request forgery in IBM Business Automation Workflow 18.0.0.0–18.0.0.1 (and related BPM components). The IBM Security Bulletin and CNVD/CVE records describe an issue where an attacker could induce unauthorized actions by a trusted user’s session. The IBM bulletin ...

Fedora Update for ntfs-3g FEDORA-2019-c1e6c6edd9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

CVE-2019-1611 Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)

A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...