CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2017-7641

The CVE-2017-7641 entry documents a CSRF vulnerability in the QNAP NAS Media Streaming add-on. Affected versions include 421.1.0.2, 430.1.2.0, and earlier. Root cause: the add-on does not implement CSRF protections, which could allow an attacker to coerce an authenticated user to perform maliciou...

CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

DEBIAN-CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7641

CVE-2018-7641 affects CImg v.220, causing a heap-based buffer over-read in load_bmp in CImg.h when loading crafted BMP images (32-bit color case). The vulnerability is related to the 32-bit colors path (case 32) and is distinct from CVE-2018-7588. Public details in connected advisories show multi...

CVE-2014-7641

CVE-2014-7641 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-7641

CVE-2016-7641 concerns WebKit in Apple ecosystems (iOS, Safari, iCloud, iTunes, etc.). The issue allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, via memory corruption in WebKit. Several connected advisories (SUSE/openSUSE patches) list thi...

Fedora Update for webkitgtk4 FEDORA-2017-d317f6fb61

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201701-27] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-201701-27 ========================================== Severity: Critical Date : 2017-01-18 CVE-ID : CVE-2016-7586 CVE-2016-7589 CVE-2016-7592 CVE-2016-7599 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-76...

disneystore.com XSS vulnerability

Vulnerable URL: https://www.disneystore.com/disneystore/product/search?searchTerms=jhj%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 19.01.2017 Latest check for patch:| 19.01.2017 18:58 GMT Vulnerability type:| XSS Vulnerability...

About the security content of Safari 10.0.2

About the security content of Safari 10.0.2 This document describes the security content of Safari 10.0.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Adobe AIR < 19.0.0.213 Multiple Vulnerabilities (APSB15-25)

Binary data 9005.prm...

CVE-2015-7641

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

CVE-2015-7641

Technical details about CVE-2015-7641 are not publicly available in the provided documents; no affected products, versions, or impact are specified here. Monitor for updates from official advisories.