105 matches found
CVE-2023-3574 Improper Authorization in pimcore/customer-data-framework
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1...
CVE-2023-3574 Improper Authorization in pimcore/customer-data-framework
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1...
Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar
Summary Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar. Hence poi-ooxml-3.9.jar upgraded to poi-ooxml-4.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2017-5644 DESCRIPTION: Apache POI is vulnerable to a denial of service, cause by an XML External...
Medium: ImageMagick
Issue Overview: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file,...
SUSE CVE-2021-3574
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks...
Mageia: Security Advisory (MGASA-2022-0446)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5736-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3574
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection...
CVE-2022-3574 WPForms Pro < 1.7.7 - CSV Injection
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection...
CVE-2022-3574
CVE-2022-3574 concerns WPForms Pro for WordPress, where versions before 1.7.7 do not validate form data while generating exported CSVs, enabling potential CSV injection. The vulnerability affects the CSV export logic, with CVSS v3.1 metrics indicating high severity (CRITICAL) across confidentiali...
SUSE: Security Advisory (SUSE-SU-2022:3552-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3552-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2021-3574: Fixed memory leaks with convert command bsc1203212...
CVE-2021-3574
A vulnerability was found in ImageMagick. Memory leaks are detected when executing a crafted file with the convert command, affecting availability...
UBUNTU-CVE-2021-3574
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks...
CVE-2021-3574
CVE-2021-3574 affects ImageMagick 7.0.11-5. A crafted TIFF file processed with convert triggers a memory leak as detected by ASAN. The connected documents confirm the product (ImageMagick) and the vulnerable routine (memory handling during conversion) but do not provide a remediation version or w...
Ubuntu: Security Advisory (USN-3574-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3574
creationtimestamp| type| source ---|---|--- 2020-11-06 22:51:20+00:00| seen| https://t.me/cibsecurity/16002...
CVE-2020-3574
CVE-2020-3574 affects Cisco IP Phones, where the TCP packet processing path is vulnerable due to insufficient TCP ingress packet rate limiting. An unauthenticated remote attacker can send a high, sustained rate of crafted TCP traffic to disrupt operations, causing calls to stop, drop, or the devi...
