ROS-20230620-02

Vulnerability of FreeImages library for working with graphic formats is related to reading data outside the buffer boundaries in memory. buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, to cause a denial of service via a crafted JXR file...

FreeImages PluginTIFF Buffer Overflow DoS

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library is related to the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeImages Graphics Format Resource Exhaustion

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library is related to the lack of mechanisms for controlling the resources used by the system. Exploiting this vulnerability could allow an attacker to cause service interruptions...

freeimages.com XSS vulnerability

Open Bug Bounty ID: OBB-284736 Description| Value ---|--- Affected Website:| freeimages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

freeimages.com XSS vulnerability

Open Bug Bounty ID: OBB-240422 Description| Value ---|--- Affected Website:| freeimages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

freeimages.com XSS vulnerability

Open Bug Bounty ID: OBB-193108 Description| Value ---|--- Affected Website:| freeimages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

freeimages.com XSS vulnerability

Vulnerable URL: http://www.freeimages.com/search?q=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...