CVE-2017-12598: Out-of-bounds Read

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case...

CVE-2017-12597: Out-of-bounds Write

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...

OpenCV Denial of Service Vulnerability (CNVD-2017-24180)

OpenCV is an open source, cross-platform, lightweight computer vision library. A denial-of-service vulnerability exists in the 'cv::RBaseStream::readBlock' function in the modules/imgcodecs/src/bitstrm.cpp file in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to caus...

CVE-2017-12601: Buffer Copy without Checking Size of Input

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

PT-2017-4338

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an out-of-bounds read error in the icvCvt BGRA2BGR 8u C4C3R function when reading an image file using cv::imread. This error can allow a remote attacker to access confidential...

CVE-2017-11715

job/uploadfilesave.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execute arbitrary PHP code by uploading a .phtml file after certain actions involving admin/system/safe.php and job/cv.php...

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-7469

This CVE entry is rejected and not used; reference CVE-2017-7466 instead.

cv-library.co.uk XSS vulnerability

Vulnerable URL: https://www.cv-library.co.uk/cgi-bin/password.cgi Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:| 22.03.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10184 VIP website status:| Yes Check...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/cgi-bin/searchjobs.cgi?q=Test+Engineer=Chesham%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22=15===annum=28=1= Details: Description| Value ---|--- Patched:| Yes, at 23.03.2017 Latest check for patch:| 23.03.2017 08:46 GMT...

cv-library.co.uk XSS vulnerability

Vulnerable URL: https://www.cv-library.co.uk/cgi-bin/candlogin.cgi?return="OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 20:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8678 VIP website...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/job/204107125/Test-Technician?s=100218"openbug'%3Balert'OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8454 VIP website status:| Yes Check cv-library.co....

WordPress Job Board 1.0.0 Cross Site Scripting

Plugin Name : Job Board Effected Version : 1.0.0 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload as bel...

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/cgi-bin/searchjobs.cgi?posted=28=1=1=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=15===annum=Any Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:|...

Job Manager <= 0.7.25 - Insecure Direct Object Reference (IDOR)

It is possible to enumerate the CV filename that is uploaded on the server and then access the CV file by performing a bruteforce attack to the wordpress upload directory structure...

Bash Botnet Exploit Found, Bash Patches Incomplete

The urgency to patch systems against the Bash zero-day vulnerability has been cranked to 10 after reports of an exploit in the wild have been made public by AusCERT, the Computer Emergency Response Team of Australia. This seems to reflect a similar finding posted by a researcher who goes by the...

T-Dreams Job Seekers Package 3.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...

Joomla Component CV Maker com_cvmaker Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Joomla Component CV Maker Local File Inclusion Vulnerability Software : comcvmaker version 1.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf s4...