1852 matches found
Pillow 输入验证错误漏洞
Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...
The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function in the FactoryTalk Linx automation software allows a intruder to trigger a service failure.
The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function messaging.dll in the FactoryTalk Linx automation software is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a...
openSUSE Security Update : mumble (openSUSE-2021-300)
This update for mumble fixes the following issues : mumble was updated to 1.3.4 : - Fix use of outdated non-existent notification icon names - Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 - Server: Fix Exit status for actions like...
Security update for mumble (moderate)
openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0312-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the...
Process Steps Template Designer < 1.3 - CSRF to Stored Cross-Site Scripting (XSS)
The plugin did not properly check its CSRF nonce in the FontAwesomeField.save method, which could allow attackers to make logged in users capable of editing posts change the Step Icon of arbitrary Process Steps. Due to the lack of sanitisation of the submitted Step icon value, it could also lead ...
The vulnerability in the implementation of the “moz-icon:“ protocol of the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the “moz-icon:“ protocol implementation in Mozilla Firefox is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Totolink A702r Access Control Error Vulnerability
The Totolink A702r is a router device from the Chinese company Totolink. The Totolink A702r V1.0.0-B20161227.1023 suffers from an access control error vulnerability that allows an attacker to access the icon directory via the GET parameter. No detailed vulnerability details are provided at this...
TotoLink A702r 访问控制错误漏洞
The Totolink A702r is a router device from the Chinese company Totolink. The Totolink A702r V1.0.0-B20161227.1023 suffers from an access control error vulnerability that allows an attacker to access the icon directory via the GET parameter. No detailed vulnerability details are provided at this...
The vulnerability of the fly-wm window manager, related to improper release of memory before deleting last references, allows attackers to gain access to confidential data.
The vulnerability of the fly-wm window manager is related to the improper release of memory after moving the icon to a new location. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
Design/Logic Flaw
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
CVE-2020-9963 is fixed in macOS Big Sur 11.0.1, iOS 14.0, and iPadOS 14.0. The issue arises from icon-cache handling, where a malicious app could determine whether files exist on the host. The RedHat/Apple documentation attributes the fix to improved handling of icon caches. Practical impact is i...
Fedora 31 : seamonkey (2020-fd5918d946)
Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...
Fedora 32 : seamonkey (2020-396a3dfb1f)
Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...
icon-favor.ru Cross Site Scripting vulnerability OBB-1487643
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
freerdp: out-of-bounds read in update_read_icon_info function
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount of client memory 32bit unsigned - 4GB to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has...
iconeventcatering.com.au Cross Site Scripting vulnerability OBB-1386630
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...