CVE-2023-6228 Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

CVE-2023-6228

CVE-2023-6228 affects libtiff’s tiffcp utility. The issue is a heap-based buffer overflow in cpStripToTile() inside tools/tiffcp.c when processing crafted TIFFs, which can crash the application (denial of service). Public advisories confirm a patched libtiff release is available; several sources ...

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

OESA-2023-1857 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6228-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6228-1 advisory. It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An...

Ubuntu: Security Advisory (USN-6228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6228

CVE-2020-6228 affects SAP Business Client versions 6.5 and 7.0. The root cause is missing integrity checks that could allow an attacker under certain conditions to modify the installer. The documents do not specify exploitation status or in-the-wild activity. Impact is described as the installer ...

Apple Safari < 12.0.3 Multiple Vulnerabilities

Binary data 700508.prm...

CVE-2019-6228

CVE-2019-6228 is a cross-site scripting vulnerability in Safari resolved by improved URL validation. The issue affects Safari on macOS/iOS as described in Apple advisories and the linked NVD entry. Exploitation would occur when processing malicious web content, potentially enabling an attacker to...

CVE-2019-6228

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack...

macOS : Apple Safari < 12.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.3. It is, therefore, affected by the following vulnerabilities : - Input-validation errors exist that allow memory corruption leading to arbitrary code execution. CVE-2019-6212, CVE-2019-6215, CVE-2019-621...

CVE-2018-6228

The Connected docs confirm CVE-2018-6228 targets Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) and involves a SQL injection in policies.jsp via the hidEditId parameter, which is not sanitized before being passed to editPolicy.jsp. This leads to dynamic SQL construction (e.g., queries o...

Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities

Trend Micro Email Encryption Gateway 5.5 Build 1111.00 - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Trend Micro Email Encryption Gateway Multiple Vulnerabilities 1. Advisory Information Title: Trend Micro Email Encryption Gateway Multiple...

cars.com XSS vulnerability

Open Bug Bounty ID: OBB-376943 Description| Value ---|--- Affected Website:| cars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-6228

CVE-2015-6228 entry is rejected/not used and does not represent an active vulnerability.

CVE-2015-6228

...

CVE-2012-6228

CVE-2012-6228 entry is rejected/not used and does not represent an active vulnerability.

CVE-2012-6228

...

cars.com XSS vulnerability

Open Bug Bounty ID: OBB-126595 Description| Value ---|--- Affected Website:| cars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...