CVE-2019-9581

Booked Scheduler 2.7.5 (phpscheduleit) is vulnerable to arbitrary file upload via the Favicon field. The root cause is that Presenters/Admin/ManageThemePresenter.php does not constrain image file extensions, allowing uploaded content to be executed as PHP code (Web/custom-favicon.php) on the serv...

Android RSSI Broadcast Information Disclosure

Blog post here: https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-9581/ NOTE: This bug is part of a series of three related Android bugs with the same root cause: CVE-2018-9489, CVE-2018-9581 and CVE-2018-15835. A presentation covering all three bugs was given at BSides DE in the fall ...

CVE-2018-9581

creationtimestamp| type| source ---|---|--- 2018-11-12 18:41:05+00:00| seen| MISP/5be9c820-b558-4494-a96e-4a4d0a021402 2018-11-12 18:45:50+00:00| seen| MISP/5be9ca0e-c440-4436-9b1a-4a4d0a021402 2018-11-14 14:55:54+00:00| seen| https://t.me/SecLabNews/3629 2018-11-16 14:36:58+00:00| seen|...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2016-9581

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert32sC1P1 was found in openjpeg 2.1.2...

ALPINE-CVE-2016-9581

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert32sC1P1 was found in openjpeg 2.1.2...

CVE-2016-9581

OpenJPEG 2.1.2 contains an infinite loop in tiftoimage that leads to a heap buffer overflow in convert_32s_C1P1. OpenJPEG-related advisories (e.g., GLSA 2017-10) recommend upgrading to the latest OpenJPEG (≥2.3.0). Several openSUSE/OpenJPEG advisories list CVE-2016-9581 among heap overflow/loop i...

CVE-2017-9581

The CVE-2017-9581 vulnerability describes the iOS app Algonquin State Bank Mobile Banking (version 3.0.0) not verifying X.509 certificates from SSL servers. This enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents confirm the...

openSUSE Security Update : openjpeg2 (openSUSE-2017-120)

This update for openjpeg2 fixes the following issues : - CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 - CVE-2016-7445: NULL...

openSUSE Security Update : openjpeg2 (openSUSE-2017-101)

This update for openjpeg2 fixes the following issues : - CVE-2016-9114: NULL pointer Access in function imagetopnm of convert.c:1943jp2 could lead to crash bsc1007740 - CVE-2016-9115: Heap Buffer Overflow in function imagetotga of convert.cjp2 bsc1007741 - CVE-2016-9580, CVE-2016-9581: Possible...

Fedora Update for openjpeg2 FEDORA-2016-3b7f39a8c1

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-openjpeg2 FEDORA-2016-52a1b18397

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-openjpeg2 FEDORA-2016-89ee54c661

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : mingw-openjpeg2 (2016-52a1b18397)

This update fixes CVE-2016-9580 and CVE-2016-9581. ---- This update adds a patch to fix CVE-2016-9573 and CVE-2016-9572. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 24 : openjpeg2 (2016-3b7f39a8c1)

This update fixes CVE-2016-9580 and CVE-2016-9581. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : mingw-openjpeg2 (2016-89ee54c661)

This update fixes CVE-2016-9580 and CVE-2016-9581. ---- This update adds a patch to fix CVE-2016-9573 and CVE-2016-9572. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Remote Utilities Client Detection

Binary data 9581.prm...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9445, CVE-2014-9581, CVE-2014-9582. Reason: This candidate is not authorized for use because it is part of the 2014 CVE-ID ID-Syntax protection block, which protects against accidental truncation of CVE IDs with sequence...

CVE-2014-9581

Codiad 2.4.3 contains a directory traversal vulnerability in components/filemanager/download.php that allows an attacker to read arbitrary files by injecting .. in the path parameter. This is the behavior described for CVE-2014-9581, with CNVD-2015-00341 corroborating the path-traversal nature in...

SuSE 11.3 Security Update : Python (SAT Patch Number 9581)

This update for Python provides fixes for the following issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters. CVE-2014-4650 - The 'urlparse' module has been updated to correctly parse IPv6 addresses. bnc872848 - Correctly enable IPv6 support. %NASLMINLEV...