Lucene search
+L

2981 matches found

Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•1 views

PT-2021-20446

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the BMP loader.dll library, which lacks proper validation of user-supplied data when parsing SGI files. This...

7.8CVSS0.0166EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•5 views

PT-2021-20450

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the BMP loader.dll library, which lacks proper validation of user-supplied data when parsing SGI files. This...

7.8CVSS0.0166EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/09 12:00 a.m.•3 views

CVE-2021-27036: Out-of-bounds Write

A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while parsing PCX, PDF, PICT, RCL, BMP, PSD or TIFF files. This vulnerability can be exploited to execute arbitrary code...

7.8CVSS6.7AI score0.01708EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/07/07 12:00 a.m.•20 views

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

6.5CVSS6.9AI score0.03028EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/07/07 12:00 a.m.•11 views

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to the infinite execution of a loop, allows an attacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially created file...

6.5CVSS6.9AI score0.03099EPSS
SaveExploits1References10Affected Software3
OSV
OSV
•added 2021/06/29 3:15 p.m.•16 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.1AI score0.01811EPSS
SaveExploits0References3
NVD
NVD
•added 2021/06/29 3:15 p.m.•59 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS0.01811EPSS
SaveExploits0References3
Prion
Prion
•added 2021/06/29 3:15 p.m.•24 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.01811EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/06/29 3:15 p.m.•10 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.2AI score0.01811EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/29 2:33 p.m.•62 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.01811EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/29 2:33 p.m.•101 views

CVE-2021-31513

OpenText Brava! Desktop (Build 16.6.4.55) is affected by CVE-2021-31513 due to an out-of-bounds write in BMP file parsing. The vulnerability allows remote code execution and requires user interaction (visiting a malicious page or opening a malicious BMP). Root cause: insufficient validation of us...

7.8CVSS7.8AI score0.01811EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/29 12:00 a.m.•5 views

CVE-2021-31513: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.6AI score0.01811EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/06/15 12:00 a.m.•73 views

OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/10 12:00 a.m.•56 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.03962EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•13 views

SUSE: Security Advisory (SUSE-SU-2017:3441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/05/17 12:00 a.m.•16 views

PT-2021-10680

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of t...

6.5CVSS6.6AI score0.00863EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2021/05/05 12:00 a.m.•105 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.5AI score0.99981EPSS
SaveExploits39References4
OSV
OSV
•added 2021/04/30 8:16 p.m.•15 views

MGASA-2021-0201 Updated sdl2 packages fix security vulnerabilities

This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files CVE-2020-14409, CVE-2020-14410...

7.8CVSS6.9AI score0.01659EPSS
SaveExploits0References5
Mageia
Mageia
•added 2021/04/30 8:16 p.m.•43 views

Updated sdl2 packages fix security vulnerabilities

This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files CVE-2020-14409, CVE-2020-14410...

7.8CVSS1.2AI score0.01659EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/04/30 12:00 a.m.•52 views

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2021-1813)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...

9.8CVSS7.6AI score0.03301EPSS
SaveExploits1References6
Rows per page
Query Builder