51 matches found
openSUSE Security Update : ImageMagick (openSUSE-2016-1242)
This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)
This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-1229)
This update for GraphicsMagick fixes the following issues : - security update : - CVE-2016-8684 boo1005123 - CVE-2016-8682 boo1005125 - CVE-2016-8683 boo1005127 - security update : - CVE-2016-7529 boo1000399 - CVE-2016-7528 boo1000434 - CVE-2016-7515 boo1000689 - CVE-2016-7446 boo999673 -...
CVE-2015-6823
The allocatebuffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted Apple Lossless Audio Codec ALAC data...
CVE-2015-6823
The vulnerability CVE-2015-6823 affects FFmpeg’s libavcodec/alac.c:allocate_buffers, where uninitialized context data can be used by crafted ALAC data to trigger a denial of service (segmentation fault) or other impact. This originates from FFmpeg before 2.7.2 failing to initialize certain pointe...
CVE-2014-6823
CVE-2014-6823 affects the Android app kuailecaidengmi (com.licai.kuailecaidengmi) version 1.7.12.15. The root cause is that the app does not verify X.509 SSL certificates, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The documents do not...
CVE-2013-6823
GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2013-6823
GRMGApp in SAP NetWeaver is affected by a remote-authentication bypass vulnerability (CVE-2013-6823). The issue allows bypassing intended access restrictions via unspecified vectors over a network. The NVD entry lists a MEDIUM base score (6.4), with network attack vector, low complexity, no authe...
CVE-2008-6823
creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6899 2018-12-11 16:08:58+00:00| seen| MISP/5c0fdf07-0608-4e51-9884-1f070a021402 2018-12-13 08:43:56+00:00| seen| https://t.me/securixykz/328...
CVE-2006-6823
PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
CVE-2006-6823
The provided records identify CVE-2006-6823 as a PHP remote file inclusion vulnerability in Yrch! 1.0, specifically in plugins/metasearch/plug.inc.php. The root cause is ARBITRARY PHP code execution via a URL supplied in the path parameter, enabling an attacker to run code on the affected server....