CVE-2018-8350

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10...

CVE-2018-8350

CVE-2018-8350 is a remote code execution vulnerability in the Microsoft Windows PDF Library, triggered by improper handling of in-memory objects. Affected products include Windows 10 (and Windows 10 Server variants) where the library is used to process PDFs. The issue’s root cause is the library’...

Microsoft Windows PDF CVE-2018-8350 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsof...

CVE-2015-8350

Multiple cross-site scripting XSS vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 open-tab parameter in a wpctaglobalsettings action to wp-admin/edit.php or 2 wp-cta-variation-id parameter to...

CVE-2015-8350

CVE-2015-8350 covers two XSS vulnerabilities in the WordPress plugin Calls to Action prior to 2.5.1. The flaws arise from unsanitized input in two GET parameters: open-tab (wp_cta_global_settings action, used in wp-admin/edit.php) and wp-cta-variation-id (in ab-testing-call-to-action-example/). T...

Updated graphicsmagick packages fix security vulnerabilities

New stable upstream release including security fixes for CVE-2016-7800, CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684, CVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799, CVE-2017-10800, CVE-2017-11403 and possibly several other security issues...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-781)

This update for GraphicsMagick fixes the following issues : - CVE-2017-8350: an additional fix for a denial of service memory leak in the JNG decoder was done. boo1036985 c13-c21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SUSE-SU-2017:1599-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: This security issue was fixed: - CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file bsc1034876. - CVE-2017-8351: ImageMagick, GraphicsMagick: denial of servi...

ImageMagick 6.x < 6.9.8-10 / 7.x < 7.0.5-9 Multiple Vulnerabilities

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.8-10 or 7.x prior to 7.0.5-9. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the ReadRLEImage function within file coders/rle.c when reading image color maps due to issues related to a...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-616)

This update for GraphicsMagick fixes the following issues : - CVE-2017-8350: denial of service via crafted PNG file boo1036985 - CVE-2017-8351: denial of service via crafted PCD file boo1036986 - CVE-2017-8353: denial of service via crafted PICT file boo1036988 - CVE-2017-8355: denial of service...

[SECURITY] [DSA 3863-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3863-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2017 https://www.debian.org/security/faq -...

CVE-2017-8350

In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-8350

CVE-2017-8350 is rejected/not used per the description and does not represent an active vulnerability.

CVE-2016-8350

CVE-2016-8350 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Moxa ioLogik E1200 and E2200 series devices. The issue lies in the web application failing to verify that requests originate from a valid user, enabling remote attackers to perform unauthorized operations. Affected firmw...

WordPress Calls To Action 2.4.3 Cross Site Scripting Vulnerability

WordPress Calls to Action plugin version 2.4.3 suffers from a cross site scripting vulnerability. Product: Calls to Action WordPress plugin Vendor: InboundNow Vulnerable Versions: 2.4.3 and probably prior Tested Version: 2.4.3 Advisory Publication: October 7, 2015 without technical details Vendor...

WordPress Calls To Action 2.4.3 Cross Site Scripting

Advisory ID: HTB23274 Product: Calls to Action WordPress plugin Vendor: InboundNow Vulnerable Versions: 2.4.3 and probably prior Tested Version: 2.4.3 Advisory Publication: October 7, 2015 without technical details Vendor Notification: October 7, 2015 Vendor Patch: October 27, 2015 Public...

[ MDVSA-2014:221 ] php-smarty

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:221 http://www.mandriva.com/en/support/security/ Package : php-smarty Date : November 21, 2014 Affected: Business Server 1.0 Problem Description: References: https://vulners.com/cve/CVE-2012-4437...

Updated php-smarty packages fix security vulnerability

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template CVE-2014-8350...

Fedora 21 : php-Smarty-3.1.21-1.fc21 (2014-13618)

New upstream release, fix CVE-2014-8350 New upstream release New upstream release New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Update for php-Smarty FEDORA-2014-13574

Check the version of php-Smarty SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868450";...