Jizhicms 代码问题漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China's Extreme Networks Technology Company. Jizhicms v1.5 version of the existence of security vulnerabilities, attackers can take advantage of the vulnerability through the special .jpg fil...

Apple 多款产品缓冲区错误漏洞

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is an...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to potentially cause out-of-bounds reads in ntfsattrfind and...

CVE-2021-30939

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS, which can result in arbitrary code execution due to the handling of maliciously crafted images. The following products and versions are affected: iPhone 6s...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can result in arbitrary code execution due to the...

CVE-2021-34716

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root user. This vulnerability is due to incorrec...

Cisco Expressway Series和Cisco TelePresence Video Communication Server 安全漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp

A flaw was found in exiv2. A flawed bounds checking in the jp2Image.cpp:doWriteMetadata function leads to a heap-based buffer overflow. This flaw allows an attacker who can provide a malicious image to an application using the exiv2 library, to write data out of bounds and potentially execute cod...

AZL-7221 CVE-2021-37619 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

UBUNTU-CVE-2021-37619

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an infinite loop. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an assertion failure. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could exploit this vulnerability via specially crafted image files to cause a denial of service...

PT-2021-7925 · Exiv2 +9 · Exiv2 +9

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: The issue is related to an out-of-bounds read in Exiv2, which can be triggered when the utility is used to write metadata into a crafted image file. This could potentially allow an attacker to...

USN-5012-1 containerd vulnerabilities

It was discovered that containerd incorrectly handled file permission changes. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could change permissions on files on the host filesystem and possibly escalate privileges...

CVE-2021-32760

containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access t...

The vulnerability of the ExtractPostscript function in the coders/wpg.c component of the console-based ImageMagick graphics editor allows a violator to trigger a service failure due to a flaw in the resource consumption monitoring mechanism.

The vulnerability of the ExtractPostscript function in the coders/wpg.c component of the console-based ImageMagick graphics editor is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created wpg imag...

HTMLDOC 代码问题漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript, and PDF formats.HTMLDOC is vulnerable to an input validation error, which stems from insufficient validation of user-supplied input. A remote attacker could exploit the vulnerability to pass...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system from Apple Inc. that was developed specifically for Mac computers. The macOS suffers from an Input Validation Error vulnerability that stems from a boundary error when processing untrustworthy input in Model I/O. A remote attacker could exploit the...