CVE-2014-8562

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

DEBIAN-CVE-2014-9837

coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file...

CVE-2014-8355

PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

DEBIAN-CVE-2014-8354

The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

CVE-2014-8562

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

CVE-2014-8354

The CVE-2014-8354 vulnerability affects ImageMagick and is triggered by the HorizontalFilter function in resize.c. Versions prior to 6.8.9-9 are affected. Attackers can supply a crafted image to cause an out-of-bounds read, resulting in denial of service. The issue originates in the image resizin...

CVE-2014-9837

CVE-2014-9837 affects ImageMagick 6.9.0-1 Beta and earlier. The flaw is in coders/pnm.c, exploitable remotely via a crafted PNG file to cause a crash (denial of service). Connected sources confirm the affected component and vector but do not specify a patch version or remediation in the provided ...

CVE-2014-8716

CVE-2014-8716 affects ImageMagick’s JPEG decoder up to version 6.8.9-9. The vulnerability stems from an out-of-bounds memory access during JPEG decoding, allowing local users to cause a denial of service (crash). Affected: ImageMagick before 6.8.9-9; Impact: local DoS. Mitigation: upgrade to 6.8....

CVE-2014-9837

coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file...

CVE-2014-8562

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

CVE-2014-8562

CVE-2014-8562: In ImageMagick, the DCM decode path is vulnerable to an out-of-bounds read, enabling a remote attacker to cause a denial of service. Affected: ImageMagick before 6.8.9-9. Impact: DoS via crafted image. Fix: upgrade to ImageMagick 6.8.9-9 or later (patch and versions not explicitly ...

CVE-2014-8355

CVE-2014-8355 : Affected software is ImageMagick. The PCX parser code before 6.8.9-9 allows remote attackers to cause a denial of service via an out-of-bounds read. Remediation is to upgrade to ImageMagick 6.8.9-9 or newer (vendor-supplied patch). If you cannot upgrade, apply vendor guidance for ...

CVE-2014-4148

creationtimestamp| type| source ---|---|--- 2017-04-10 18:27:54+00:00| seen| MISP/58ebcb95-ce14-4c45-8b67-9b5402de0b81 2017-04-11 11:48:10+00:00| seen| MISP/58ecc214-a3a0-4d43-adff-95c6950d210f 2020-10-09 16:54:06+00:00| seen| MISP/a55437f3-0cf7-44ca-9fdd-edefb18b7111 2023-06-14 21:10:03+00:00|...

CVE-2014-2960

This CVE concerns Vision Critical before 2014-05-30, where an information-disclosure vulnerability allowed reading arbitrary files via unspecified vectors, demonstrated with image and configuration files. Affected product: Vision Critical cloud-based intelligent user management platform (pre-2014...

[slackware-security] libtiff

New libtiff packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libtiff-4.0.7-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...

XML External Entity (XXE)

Glassfish web-core is vulnerable to XML External Entity XXE attacks. These allow remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference. This is relate...

WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...

IBM WebSphere Portal Sensitive Information Disclosure Vulnerability (swg21963226)

IBM Websphere Portal is prone to sensitive information Disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

F5 Networks BIG-IP : Mailx vulnerabilities (K16945)

CVE-2014-7844 The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell meta characters in an email address. CVE-2004-2771 A flaw was found in the way mailx handled the parsing of email addresses...

F5 Networks BIG-IP : cURL and libcurl vulnerability (K16704)

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. CVE-2015-3143 C Tenable Network Security, Inc. The descriptive text and package checks in thi...