56 matches found
SUSE-SU-2017:1599-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: This security issue was fixed: - CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file bsc1034876. - CVE-2017-8351: ImageMagick, GraphicsMagick: denial of servi...
[SECURITY] [DSA 3863-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3863-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2017 https://www.debian.org/security/faq -...
CVE-2016-8765
CVE-2016-8765 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-8765
CVE-2017-8765 is rejected/not used (per initial description).
CVE-2017-8765
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...
CVE-2015-8765
CVE-2015-8765 affects Intel McAfee ePolicy Orchestrator (ePO) with remote code execution via crafted serialized Java objects in the Apache Commons Collections library. Affected versions include ePO 4.6.9 and earlier; 5.0.x; 5.1.x before 5.1.3 Hotfix 1106041; and 5.3.x before 5.3.1 Hotfix 1106041....
Opera Web Browser Detection
Binary data 8765.prm...
CVE-2014-8765
Multiple cross-site scripting XSS vulnerabilities in the Project Issue File Review module PIFR module 6.x-2.x before 6.x-2.17 for Drupal allow 1 remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to th...
CVE-2014-8765
CVE-2014-8765 affects the Drupal Project Issue File Review (PIFR) module 6.x-2.x prior to 6.x-2.17. The vulnerability is Cross-Site Scripting (XSS) via a crafted patch that causes PIFR client test results to be sent to the PIFR_Server test results page, and an additional vector where remote authe...
CVE-2014-8765
Multiple cross-site scripting XSS vulnerabilities in the Project Issue File Review module PIFR module 6.x-2.x before 6.x-2.17 for Drupal allow 1 remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to th...
propertyguru.com.my XSS vulnerability
Open Bug Bounty ID: OBB-49064 Description| Value ---|--- Affected Website:| propertyguru.com.my Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...
SA-CONTRIB-2014-023 - Project Issue File Review - XSS
The Project Issue File Review PIFR module provides an abstracted client-server model and plugin API for performing distributed operations such as code review and testing, with a focus on supporting Drupal development. Two scenarios were identified where the module does not sufficiently sanitize...
JDownloader Webinterface Source Code Disclosure Vulnerability
Exploit for php platform in category web applications ============================================================= JDownloader Webinterface Source Code Disclosure Vulnerability ============================================================= Exploit Title: JDownloader Webinterface Source Code...
Infoseek Ultraseek 2.13.1 for NT - GET Buffer Overflow
Infoseek Ultraseek 2.13.1 for NT - GET Buffer Overflow source: https://www.securityfocus.com/bid/874/info Infoseek's Ultraseek enterprise search server listens on port 8765 by default for HTTP commands. The code that handles GET commands has an unchecked buffer that will allow arbitrary code to b...
