Lucene search
+L

5394 matches found

Hacker One
Hacker One
added 2019/07/12 3:23 p.m.159 views

Internet Bug Bounty: Basic Authentication Heap Overflow

Summary: An attacker can get arbitrary data overflowed in the heap via Basic Authorization base64 blob. Even when basic auth isn't configured. Report sent to developers When calling HttpHeader::getAuth the field value will be base64 decoded. The call to the decode method doesn't ensure that the...

6.8CVSS9.9AI score0.49037EPSS
SaveExploits0
OSV
OSV
added 2019/07/11 7:15 p.m.36 views

CVE-2019-12529

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

5.9CVSS6.4AI score
SaveExploits0References12
OSV
OSV
added 2019/07/10 12:15 p.m.7 views

DEBIAN-CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS9.1AI score0.03554EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/10 12:15 p.m.6 views

ALPINE-CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS7.4AI score0.03554EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/10 12:15 p.m.12 views

AZL-45027 CVE-2018-14550 affecting package libpng15 1.5.30-15

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS7.2AI score0.03554EPSS
SaveExploits1References1
NVD
NVD
added 2019/07/10 12:15 p.m.24 views

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS8.9AI score0.03554EPSS
SaveExploits1References6
OSV
OSV
added 2019/07/10 12:15 p.m.10 views

AZL-44014 CVE-2018-14550 affecting package libpng15 1.5.30-15

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS7.2AI score0.03554EPSS
SaveExploits1References1
Prion
Prion
added 2019/07/10 12:15 p.m.27 views

Stack overflow

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

6.8CVSS8.7AI score0.03554EPSS
SaveExploits1References6Affected Software3
UbuntuCve
UbuntuCve
added 2019/07/10 12:15 p.m.36 views

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS7.1AI score0.03554EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2019/07/10 12:0 a.m.71 views

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8CVSS8.9AI score0.03554EPSS
SaveExploits1
Cvelist
Cvelist
added 2019/07/10 12:0 a.m.43 views

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

8.8AI score0.03554EPSS
SaveExploits1References6
OSV
OSV
added 2019/07/08 3:13 p.m.11 views

SUSE-SU-2019:1773-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425...

8.1CVSS7.8AI score0.03708EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2019/07/02 12:0 a.m.41 views

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1683-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.1AI score0.04057EPSS
SaveExploits8References2
Tenable Nessus
Tenable Nessus
added 2019/07/02 12:0 a.m.57 views

openSUSE Security Update : ImageMagick (openSUSE-2019-1683)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425.- CVE-2019-11472: Fixed a denial of service in ReadXWDImag...

8.8CVSS6.5AI score0.04057EPSS
SaveExploits8References20
Tenable Nessus
Tenable Nessus
added 2019/06/26 12:0 a.m.62 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1712-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. Fixed a file content disclosure via SVG and WMF decoding bsc1138425.- CVE-2019-11472: Fixed a denial of service in ReadXWDImage...

8.8CVSS6.7AI score0.04057EPSS
SaveExploits8References30
RedHat Linux
RedHat Linux
added 2019/06/20 2:47 p.m.11 views

cockpit: Crash when parsing invalid base64 headers

It was found that cockpit used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

7.5CVSS5.7AI score0.04858EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2019/06/19 2:6 p.m.24 views

CVE-2019-6972

An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the...

7.7AI score0.01114EPSS
SaveExploits1References2
Prion
Prion
added 2019/06/14 5:29 p.m.29 views

Design/Logic Flaw

Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

5CVSS7.7AI score0.00678EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/06/07 12:0 a.m.111 views

Ubuntu 18.04 LTS : Exim vulnerability (USN-4010-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4010-1 advisory. It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands. Tenabl...

10CVSS9.1AI score0.99961EPSS
SaveExploits27References2
OSV
OSV
added 2019/06/05 5:11 p.m.9 views

USN-4009-2 php5 vulnerabilities

USN-4009-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly decoding certain MIME headers. A remote attacker could possibly use this issue to cause PHP t...

9.1CVSS6.5AI score0.04068EPSS
SaveExploits2References3
Rows per page
Query Builder