Lucene search
+L

240 matches found

Veracode
Veracode
added 2022/01/26 1:52 p.m.21 views

Denial Of Service (DoS)

libimage-exiftool-perl:bookworm is vulnerable to denial of service. lib/Image/ExifTool.pm in ExifTool mishandles a $file = /|$/ check...

7.8CVSS2.4AI score0.07575EPSS
Exploits5References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/01/25 6:15 a.m.5 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
Exploits5References3
NVD
NVD
added 2022/01/25 6:15 a.m.20 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS0.07575EPSS
Exploits5References2
OSV
OSV
added 2022/01/25 6:15 a.m.1 views

DEBIAN-CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.4AI score0.07575EPSS
Exploits5References1
Prion
Prion
added 2022/01/25 6:15 a.m.19 views

Command injection

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.6CVSS7.6AI score0.07575EPSS
Exploits5References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/01/25 6:15 a.m.345 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
Exploits5References3
OSV
OSV
added 2022/01/25 6:15 a.m.7 views

UBUNTU-CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
Exploits5References3
Cvelist
Cvelist
added 2022/01/25 5:10 a.m.17 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

8AI score0.07575EPSS
Exploits5References2
Debian CVE
Debian CVE
added 2022/01/25 5:10 a.m.44 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.8AI score0.07575EPSS
Exploits5
CVE
CVE
added 2022/01/25 5:10 a.m.144 views

CVE-2022-23935

ExiphTool (lib/Image/ExifTool.pm) is affected in ExifTool before 12.38 due to a faulty $file =~ /|$/ check, enabling command injection. Affected component: ExifTool Perl library; vulnerability identified as CVE-2022-23935. Public advisories from Astra Linux and Alpine Linux/Fedora-based records c...

7.8CVSS7.6AI score0.07575EPSS
Exploits5References2Affected Software1
OSV
OSV
added 2022/01/25 5:10 a.m.34 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.6AI score0.07575EPSS
Exploits5References4
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.3 views

exiftool 操作系统命令注入漏洞

exiftool is a software application. Make metadata more accessible. An operating system command injection vulnerability exists in exiftool before 12.38, which stems from the lib/Image/ExifTool.pm error handling $file = /|$/ check...

7.8CVSS7.3AI score0.07575EPSS
Exploits5References5
Positive Technologies
Positive Technologies
added 2022/01/25 12:0 a.m.3 views

PT-2022-16352 · Exiftool +3 · Exiftool +3

Name of the Vulnerable Software and Affected Versions: ExifTool versions prior to 12.38 Description: The issue arises from the mishandling of a $file = /|$/ check in lib/Image/ExifTool.pm, leading to command injection. Recommendations: For versions prior to 12.38, update to version 12.38 or later...

7.8CVSS9.6AI score0.99981EPSS
Exploits44References49
FreeBSD
FreeBSD
added 2022/01/25 12:0 a.m.27 views

Security Vulnerability found in ExifTool leading to RCE

Debian Security tracker reports: ExifTool.pm in ExifTool before 12.38 mishandles a file special characters check, leading to command injection...

7.8CVSS3.7AI score0.07575EPSS
Exploits5References1
GithubExploit
GithubExploit
added 2022/01/23 10:14 a.m.529 views

Exploit for Code Injection in Exiftool_Project Exiftool

CVE-2021-22204 About the vulnerability --- Improper neutraliz...

7.8CVSS8.4AI score0.99981EPSS
Exploits39
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:0 a.m.6 views

The vulnerability of the library for processing metadata in multimedia Exif files, related to incorrect elimination of special elements in the output data, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ExifTool library for processing metadata in multimedia files is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

7.8CVSS7.3AI score0.99981EPSS
Exploits39References13Affected Software5
GithubExploit
GithubExploit
added 2021/12/29 1:41 p.m.713 views

Exploit for Code Injection in Exiftool_Project Exiftool

ExifTool Remote Code Execution Vulnerability This should be c...

7.8CVSS7.3AI score0.99981EPSS
Exploits39
Check Point Advisories
Check Point Advisories
added 2021/12/13 12:0 a.m.31 views

ExifTool Remote Code Execution (CVE-2021-22204)

A remote code execution vulnerability exists in ExifTool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

6.8CVSS6AI score0.99981EPSS
Exploits39
Saint
Saint
added 2021/11/24 12:0 a.m.160 views

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

8.2AI score
Exploits0
Saint
Saint
added 2021/11/24 12:0 a.m.66 views

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

8.2AI score
Exploits0
Rows per page
Query Builder