Lucene search
+L

312 matches found

Amazon
Amazon
•added 2022/02/19 12:00 a.m.•44 views

Critical: perl-Image-ExifTool

Issue Overview: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check. CVE-2022-23935 Affected Packages: perl-Image-ExifTool Issue Correction: Run yum update perl-Image-ExifTool or yum update --advisory ALAS-2022-1566 to update your system. New Packages: noarch: ...

7.8CVSS7.8AI score0.07575EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2022/02/08 9:24 p.m.•107 views

USN-4987-2: ExifTool vulnerability

USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or...

7.8CVSS7.7AI score0.99981EPSS
SaveExploits39
osv-usn
osv-usn
•added 2022/02/08 9:24 p.m.•19 views

USN-4987-2 libimage-exiftool-perl vulnerability

USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or...

7.8CVSS7.7AI score0.99981EPSS
SaveExploits39References2
OpenVAS
OpenVAS
•added 2022/02/04 12:00 a.m.•31 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2022-c0c11c4776)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.07575EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2022/02/04 12:00 a.m.•30 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2022-f3ab9c77bc)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.07575EPSS
SaveExploits5References2
Veracode
Veracode
•added 2022/01/26 1:52 p.m.•28 views

Denial Of Service (DoS)

libimage-exiftool-perl:bookworm is vulnerable to denial of service. lib/Image/ExifTool.pm in ExifTool mishandles a $file = /|$/ check...

7.8CVSS2.4AI score0.07575EPSS
SaveExploits5References3Affected Software2
attackerkb
attackerkb
•added 2022/01/25 6:15 a.m.•15 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
SaveExploits5References3
osv-debian
osv-debian
•added 2022/01/25 6:15 a.m.•9 views

DEBIAN-CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.4AI score0.07575EPSS
SaveExploits5References1
NVD
NVD
•added 2022/01/25 6:15 a.m.•26 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS0.07575EPSS
SaveExploits5References2
Prion
Prion
•added 2022/01/25 6:15 a.m.•26 views

Command injection

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.6CVSS7.6AI score0.07575EPSS
SaveExploits5References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/01/25 6:15 a.m.•357 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
SaveExploits5References3
osv-ubuntu
osv-ubuntu
•added 2022/01/25 6:15 a.m.•17 views

UBUNTU-CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
SaveExploits5References3
Mend
Mend
•added 2022/01/25 5:10 a.m.•4 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

8.5CVSS0.07575EPSS
SaveExploits5References7
CVE
CVE
•added 2022/01/25 5:10 a.m.•167 views

CVE-2022-23935

ExiphTool (lib/Image/ExifTool.pm) is affected in ExifTool before 12.38 due to a faulty $file =~ /|$/ check, enabling command injection. Affected component: ExifTool Perl library; vulnerability identified as CVE-2022-23935. Public advisories from Astra Linux and Alpine Linux/Fedora-based records c...

7.8CVSS7.6AI score0.07575EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2022/01/25 5:10 a.m.•29 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

8AI score0.07575EPSS
SaveExploits5References2
osv-cve
osv-cve
•added 2022/01/25 5:10 a.m.•38 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.6AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/01/25 5:10 a.m.•53 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.8AI score0.07575EPSS
SaveExploits5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/25 12:00 a.m.•7 views

CVE-2022-23935: Improper Neutralization of Special Elements used in an OS Command

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS5.8AI score0.07575EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2022/01/25 12:00 a.m.•7 views

exiftool 操作系统命令注入漏洞

exiftool is a software application. Make metadata more accessible. An operating system command injection vulnerability exists in exiftool before 12.38, which stems from the lib/Image/ExifTool.pm error handling $file = /|$/ check...

7.8CVSS7.3AI score0.07575EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2022/01/25 12:00 a.m.•7 views

PT-2022-16352 · Exiftool +3 · Exiftool +3

Name of the Vulnerable Software and Affected Versions: ExifTool versions prior to 12.38 Description: The issue arises from the mishandling of a $file = /|$/ check in lib/Image/ExifTool.pm, leading to command injection. Recommendations: For versions prior to 12.38, update to version 12.38 or later...

7.8CVSS7.4AI score0.99981EPSS
SaveExploits44References49
Rows per page
Query Builder