CVE-2020-5240

CVE-2020-5240 affects wagtail-2fa prior to 1.4.1. Any CMS user can view and delete other users’ 2FA devices by accessing a specific path, bypassing permissions and potentially compromising accounts. The root issue is an authorization flaw that does not require special permissions to manipulate an...

CVE-2020-5240 2FA bypass through deleting devices in wagtail-2fa

In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not require special permissions in order to do so. By deleting the other users device they can disable the target users 2FA devices and potentially...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2016-1029)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-5240

creationtimestamp| type| source ---|---|--- 2018-09-12 21:06:59+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4384...

CVE-2018-5240

CVE-2018-5240 concerns privilege escalation in the Inventory Plugin for Symantec Management Agent (Altiris). The vulnerability affects the Inventory Plugin prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7, where a user could gain elevated access to resources normally protected at lower access leve...

Inventory Plugin for Symantec Management Agent Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Inventory Plugin for Symantec Management Agent Altiris product. AFFECTED PRODUCTS Inventory Plugin for Symantec Management Agent Altiris --- CVE | Affected Versions | Remediation CVE-2018-5240 | Prior to 7.6 PO...

CVE-2017-5240

Affected product: Rapid7 AppSpider Pro (before 6.14.060). Vulnerability: heap-based buffer overflow in the FLAnalyzer.exe component when parsing a malicious or malformed Flash source file. Impact: denial of service via application crash. Root cause: buffer overflow in FLAnalyzer.exe used during F...

[SECURITY] [DLA 547-2] graphicsmagick regression update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u6 CVE ID : CVE-2016-5240 Debian Bug : N/A The fix for CVE-2016-5240 was improperly applied which resulted in GraphicsMagick crashing instead of entering an infinite loop with the given proof of concept. Furthermore, the original announcement...

CVE-2016-5240

The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service infinite loop by converting a circularly defined SVG file...

UBUNTU-CVE-2016-5240

The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service infinite loop by converting a circularly defined SVG file...

CVE-2016-5240

CVE-2016-5240 affects GraphicsMagick before 1.3.24 and the ImageMagick SVG renderer; converting a circularly defined SVG file can trigger an infinite loop, causing a denial of service. Mitigation: upgrade GraphicsMagick to 1.3.24+ and ImageMagick to the patched versions per vendor advisories.

[SECURITY] [DSA 3746-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3746-1 [email protected] https://www.debian.org/security/ Luciano Bello December 24, 2016 https://www.debian.org/security/faq -...

DSA-3746-1 graphicsmagick - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

game-debate.com XSS vulnerability

Vulnerable URL: http://www.game-debate.com/games/index.php?gid=%3C/script%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E%3Cscript%3E=1login=1=1=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5240 VIP...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2016:2073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-984)

This update for GraphicsMagick fixes the following issues : - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflo...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflow...

Debian DLA-547-2 : graphicsmagick regression update

The fix for CVE-2016-5240 was improperly applied which resulted in GraphicsMagick crashing instead of entering an infinite loop with the given proof of concept. Furthermore, the original announcement mistakently used the identifier 'DLA 574-1' instead of the correct one, 'DLA 547-1'. For Debian 7...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-825)

GraphicsMagick was updated to fix 37 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9813: Crash on corrupted viff file bsc984035. - CVE-2014-9814: NULL pointer dereference in...