@bcpros/bitcore-wallet-service (8.25.45), @cron-eu/gulp-iconify (>=0.5.1, <=0.6.1) +72 more potentially affected by CVE-2015-8862 via mustache (>=2.0.0, <=2.2.0)

mustache NPM version =2.0.0, =0.5.1, =0.0.0, =0.0.0, =2.0.0-alpha.8, =0.2.0, =0.1.0, =0.3.0, =0.1.0, =1.0.0, =0.0.1, =3.0.0, =3.1.1 and more Source cves: CVE-2015-8862 Source advisory: OSV:GHSA-W3W8-37JV-2C58...

CVE-2014-8862

CVE-2014-8862 entry is rejected/not used per description.

CVE-2014-8862

...

DEBIAN-CVE-2017-7275

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service attempted large memory allocation and application crash via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866...

Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities

The version of Tenable Log Correlation Engine LCE installed on the remote host is prior to 4.8.1. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in the Handlebars library in the lib/handlebars/utils.js script due to a failur...

Memory corruption

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

CVE-2016-8862

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

CVE-2016-8862

CVE-2016-8862 concerns ImageMagick. The vulnerability is in the AcquireMagickMemory function of MagickCore/memory.c, where processing a crafted image (ImageMagick versions before 7.0.3.3) can trigger a memory allocation failure, with unspecified impact. The provided sources describe remote trigge...

CVE-2016-8862

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

UBUNTU-CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

CVE-2015-8862

The CVE-2015-8862 entry concerns the mustache package for Node.js. Affected software is mustache prior to version 2.2.1; the root cause is an XSS flaw introduced by an attribute in a mustache template that is not quoted. Impact is remote XSS where an attacker can leverage unquoted attributes to e...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

openSUSE Security Update : ImageMagick (openSUSE-2016-1512)

This security update for ImageMagick fixes the following issues : - a maliciously crafted compressed TIFF image could cause code remote code execution in the convert utility in particular circumstances CVE-2016-8707, boo1014159 - a memory allocation failure was fixed CVE-2016-8866, boo1009318,...

openSUSE Security Update : ImageMagick (openSUSE-2016-1445)

This update for ImageMagick fixes the following issues : - Memory allocation failure in AcquireMagickMemory CVE-2016-8862 bsc1007245 - update incomplete patch of CVE-2016-6823 bsc1001066 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : ImageMagick (openSUSE-2016-1443)

This update for ImageMagick fixes the following issues : - Memory allocation failure in AcquireMagickMemory CVE-2016-8862 bsc1007245 - update incomplete patch of CVE-2016-6823 bsc1001066 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1430)

This update for GraphicsMagick fixes the following issues : - a possible shell execution attack was fixed. if the first character of an input filename for 'convert' was a '|' then the remainder of the filename was passed to the shell CVE-2016-5118, boo982178 - Maliciously crafted pnm files could...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:2964-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8862: Memory allocation failure in...