[SECURITY] Fedora 35 Update: golang-github-rwcarlsen-goexif-0-0.9.20191017git9e8deec.fc35

This package provides decoding of basic exif and tiff encoded data...

Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4338 Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-559 Malicious code in @remove-bg/exif-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3beec8c73b102d14d90b0183523c9a64de0e97e6205b10e6321c36ffc84d574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Metadata Is Not Stripped From Images

While uploading an image on https://demo-publify.herokuapp.com/admin/resources as a low privileged user the meta data of the image like geolocation, device information, version, name etc is not getting stripped, as a result the attacker can collect all the meta data information of the image by...

SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1768-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1768-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block...

SUSE SLES12: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1764-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1764-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

SUSE SLES12: apache2-mod_php72 / php72 / php72-bcmath / php72-bz2 / etc (SUSE-SU-2022:1714-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1714-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

RLSA-2022:1842 Moderate: exiv2 security, bug fix, and enhancement update

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. The following packages have been upgraded to ...

The vulnerability of the Exif extension in the PHP programming language interpreter allows a perpetrator to trigger a service failure.

The vulnerability of the Exif extension in the PHP programming language interpreter arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the EXIF extension in the PHP programming language interpreter allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the PHP interpreter extension arises due to buffer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a JPEG image containing TIFF data...

The vulnerability of the exif_process_unicode function (ext/exif/exif.c) in the PHP interpreter allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the exifprocessunicode function ext/exif/exif.c in the PHP interpreter is related to the use of an uninitialized pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Insecure Storage of Sensitive Information

Description When the user uploads his profile picture, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of Scoold users like their Geolocation, their Device information like Device Name, Version, Software & Software version used,...

The vulnerability of the `exif_convert_any_to_int` function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the exifconvertanytoint function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures through specially created EXIF data...

The vulnerability of the exif_process_user_comment function (ext/exif/exif.c) in the PHP programming language allows a hacker to cause a service failure.

The vulnerability of the exifprocessusercomment function ext/exif/exif.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the exif_process_ifd_in_makernote function (ext/exif/exif.c) in the PHP programming language allows a attacker to cause a service failure, disclose protected information, or potentially have other adverse effects.

The vulnerability of the exifprocessifdinmakernote function ext/exif/exif.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures, disclose sensitive information, or potentially have other adverse effect...

GitLab 13.7 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39907)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage. CVE-2021-39907 Note that Nessus has...

The vulnerability of the exif component in the PHP programming language interpreter allows attackers to execute arbitrary PHP code.

The vulnerability of the exif component in the PHP programming language interpreter is related to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

CVE-2021-28275

CVE-2021-28275 affects JHead (versions 3.04 and 3.05). A DoS occurs due to a wild address read in the Get16u function in exif.c, leading to a segmentation fault when processing a crafted file. Public-related sources (GLSA-202210-17) note the issue with JHead across multiple releases and recommend...

jhead 代码问题漏洞

jhead is a tool for modifying JPEG file information. A code issue vulnerability exists in exif.c in jhead versions 3.04 and 3.05, which stems from an uncontrolled address read in the Get16u function in exif.c resulting in a segmentation error...