29 matches found
Medium: GraphicsMagick
Issue Overview: A possible heap overflow was discovered in the EscapeParenthesis function CVE-2016-7447. Various issues were found in the processing of SVG files in GraphicsMagick CVE-2016-7446. The TIFF reader had a bug pertaining to use of TIFFGetField when a 'count' value is returned. The bug...
Updated graphicsmagick packages fix security vulnerability
A possible heap overflow of the EscapeParenthesis function CVE-2016-7447. The Utah RLE reader did not validate that header information was reasonable given the file size and so it could cause huge memory allocations and/or consume huge amounts of CPU CVE-2016-7448. The TIFF reader had a bug...
CVE-2015-7448
CVE-2015-7448 is a SQL injection vulnerability affecting IBM Maximo Asset Management (and related Tivoli/SmartCloud Control Desk components) where remote authenticated users can cause arbitrary SQL execution via unspecified vectors. Affected products/versions include Maximo Asset Management 7.1–7...
CVE-2013-7448
CVE-2013-7448 concerns a path traversal in DidiWiki’s wiki.c, where the file-writer path in the API endpoint api/page/get fails to validate the page parameter, enabling remote attackers to read arbitrary files. Multiple connected sources reiterate the same vulnerability across various advisories ...
[SECURITY] [DLA 424-1] didiwiki security update
Package : didiwiki Version : 0.5-9+deb6u1 CVE ID : CVE-2013-7448 Debian Bug : 815111 Alexander Izmailov discovered that didiwiki, a wiki implementation, failed to correctly validate user-supplied input, thus allowing a malicious user to access any part of the filesystem...
[SECURITY] [DSA 3485-1] didiwiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3485-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3485-1] didiwiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3485-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2016 https://www.debian.org/security/faq -...
CVE-2014-7448
The CVE-2014-7448 entry applies to the DealSide Institutional Android app (version 3.1) and is caused by not verifying X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive information via crafted certificates. Affected software: DealSide Ins...
