Advisory ROSA-SA-2021-1875

Software: libjpeg-turbo 1.2.90 OS: Cobalt 7.9 CVE-ID: CVE-2014-9092 CVE-Crit: MEDIUM CVE-DESC: libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file associated with an Exif token. CVE-STATUS: default CVE-REV: default...

SUSE: Security Advisory (SUSE-SU-2015:0029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-9092

CVE-2020-9092 affects Huawei Mate 20 devices running versions earlier than 10.1.0.163 (C00E160R3P8). The issue is a JavaScript injection vulnerability where a module does not verify specific input, allowing attackers to bypass the filter mechanism and inject JavaScript, potentially compromising t...

CVE-2020-9092

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2020-1664)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif...

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2020-1555)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file,...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : libjpeg-turbo (EulerOS-SA-2020-1483)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of servi...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2020-1402)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.CVE-2017-15232 - libjpeg-turbo...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1115)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1000171

CVE-2018-1000171 is a reservation duplicate of CVE-2018-9092 linked to MiniCMS 1.10 CSRF in mc-admin/conf.php that can change the administrator password. The vulnerability arises from a CSRF in the admin password configuration page. Impact per linked records: password change without proper author...

CVE-2018-1000157

CVE-2018-1000157 is a reservation duplicate of CVE-2018-9092. Connected records provide concrete details for the underlying issue in MiniCMS 1.10: a Cross-Site Request Forgery in mc-admin/conf.php that can change the administrator password. Affected software: MiniCMS 1.10. Root cause: CSRF in adm...

MiniCMS 1.10 Cross Site Request Forgery

test document.forms0.submit;...

MiniCMS 1.10 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications test document.forms0.submit; 0day.today 2018-04-08...

MiniCMS 1.10 - Cross-Site Request Forgery

test document.forms0.submit;...

MiniCMS 1.10 - Cross-Site Request Forgery

MiniCMS 1.10 - Cross-Site Request Forgery test document.forms0.submit;...

CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...

CVE-2014-9092

CVE-2014-9092 affects libjpeg-turbo before 1.3.1, allowing remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker. Affected versions include libjpeg-turbo prior to 1.3.1; multiple vendor advisories reference this issue in various operating enviro...

Qualys Scanner Detection via UDP

Binary data 9092.prm...

Low: libjpeg-turbo

Issue Overview: A flaw in libjpeg-turbo was reported http://seclists.org/oss-sec/2014/q4/557 that could lead to a local denial of service when processing a specially-crafted JPEG issue. Affected Packages: libjpeg-turbo Issue Correction: Run yum update libjpeg-turbo or yum update --advisory...