CVE-2018-7538

Summary: CVE-2018-7538 is a SQL injection vulnerability in Tuleap’s tracker functionality present in versions before 9.18. Multiple sources (NVD, CNVD, osv.dev) describe a SQLi weakness that allows arbitrary SQL commands via the tracker search functionality. In the wild, at least one blind SQL in...

EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2017-1116)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2017-1112)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS...

CVE-2016-7538

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

CVE-2016-7538

CVE-2016-7538 affects ImageMagick's PSD image coder (coders/psd.c). A crafted PSD file could trigger a remote denial of service via an out-of-bounds write. The entry is supported by the primary CVE record and corroborated by multiple related advisories referencing ImageMagick PSD handling and DoS...

openSUSE Security Update : ImageMagick (openSUSE-2016-1282)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

openSUSE Security Update : ImageMagick (openSUSE-2016-1242)

This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

Fedora 22 : jenkins-1.609.3-5.fc22 (2015-938c70c840)

Security update, fixes: CVE-2015-7536 SECURITY-95, CVE-2015-7537 SECURITY-225, CVE-2015-7538 SECURITY-233, CVE-2015-7539 SECURITY-234 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2015-7538

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors...

CVE-2015-7538

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors...

CVE-2015-7538

CVE-2015-7538 affects Jenkins prior to 1.640 and OpenJenkins LTS prior to 1.625.2. The issue allows remote attackers to bypass the CSRF protection mechanism via unspecified vectors, enabling bypass of CSRF controls and enabling potentially unauthorized actions on behalf of an authenticated user. ...

CVE-2014-7538

The CVE-2014-7538 entry concerns The Headlines news India Android app (package com.dreamstep.wHEADLINESNEWSINDIA, version 0.21.13219.95110) failing to verify X.509 certificates when connecting to SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers...