36 matches found
Joomla! 3.3.x < 3.6.5 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JFilterInput::isFileSafe function due to improper validation of file types and extensions of uploaded files before placing them in a user-accessible pat...
Joomla! 1.7.x < 3.6.5 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JFilterInput::isFileSafe function due to improper validation of file types and extensions of uploaded files before placing them in a user-accessible pat...
Joomla! 3.4.x < 3.6.5 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JFilterInput::isFileSafe function due to improper validation of file types and extensions of uploaded files before placing them in a user-accessible pat...
Joomla! 3.5.x < 3.6.5 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JFilterInput::isFileSafe function due to improper validation of file types and extensions of uploaded files before placing them in a user-accessible pat...
CVE-2017-9837
CVE-2017-9837 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-9837
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file...
CVE-2014-9837
CVE-2014-9837 affects ImageMagick 6.9.0-1 Beta and earlier. The flaw is in coders/pnm.c, exploitable remotely via a crafted PNG file to cause a crash (denial of service). Connected sources confirm the affected component and vector but do not specify a patch version or remediation in the provided ...
CVE-2016-9837
An issue was discovered in templates/beez3/html/comcontent/article/default.php in Joomla! before 3.6.5. Inadequate permissions checks in the Beez3 layout override of the comcontent article view allow users to view articles that should not be publicly accessible, as demonstrated by an...
CVE-2016-9837
CVE-2016-9837 affects Joomla! prior to 3.6.5 via the Beez3 com_content article layout override. The vulnerability arises from inadequate ACL checks in the Beez3 override of the article view, allowing an authenticated attacker to access restricted content that should be blocked publicly. The issue...
Moodle 3.1.x < 3.1.2 Authentication Bypass
Binary data 9837.prm...
Joomla! < 3.6.5 Multiple Vulnerabilities
According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.6.5. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the JFilterInput::isFileSafe function due to improper validation of file types and extensions of...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-1430)
This update for GraphicsMagick fixes the following issues : - a possible shell execution attack was fixed. if the first character of an input filename for 'convert' was a '|' then the remainder of the filename was passed to the shell CVE-2016-5118, boo982178 - Maliciously crafted pnm files could...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-984)
This update for GraphicsMagick fixes the following issues : - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflo...
Security update for GraphicsMagick (important)
This update for GraphicsMagick fixes the following issues: - CVE-2014-9805: SEGV due to a corrupted pnm file boo983752 - CVE-2016-5240: SVG converting issue resulting in DoS endless loop boo983309 - CVE-2016-5241: Arithmetic exception div by 0 in SVG conversion boo983455 - CVE-2014-9846: Overflow...
Fedora Core 11 FEDORA-2009-9837 (wireshark)
The remote host is missing an update to wireshark announced via advisory FEDORA-2009-9837. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...