Lucene search
+L

599 matches found

Openbugbounty
Openbugbounty
added 2020/09/14 7:03 a.m.18 views

movie4kk.unblocked2.icu Cross Site Scripting vulnerability OBB-1334138

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.6AI score
SaveExploits0
CNVD
CNVD
added 2020/09/07 12:00 a.m.4 views

Foxit Reader and PhantomPDF heap buffer overflow vulnerability (CNVD-2020-62465)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. Foxit Reader and PhantomPDF heap buffer overflow vulnerability. The vulnerability stems from improper handling of dirty image resource data. An attacker can exploit this vulnerability to execute arbitrar...

8.8CVSS7.8AI score0.01799EPSS
SaveExploits1References1
OSV
OSV
added 2020/09/04 4:15 a.m.6 views

CVE-2020-12248

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

8.8CVSS7.6AI score0.01799EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2020/08/27 10:53 a.m.18 views

entrades.vinseum.cat Cross Site Scripting vulnerability OBB-1280069

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
CNVD
CNVD
added 2020/08/17 12:00 a.m.9 views

Unspecified vulnerability in ImageIO component of multiple Apple products (CNVD-2020-49295)

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.ImageIO ImageIO is a component that reads and writes image data. A security vulnerability exists in...

7.8CVSS7.4AI score0.01328EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2020/07/14 9:52 p.m.17 views

kambojsociety.com Cross Site Scripting vulnerability OBB-1226068

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
OSV
OSV
added 2020/06/04 4:15 p.m.10 views

CVE-2019-20822

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

9.8CVSS7.3AI score0.01149EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/04 4:15 p.m.29 views

CVE-2019-20822

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

9.8CVSS9.6AI score0.01149EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/04 4:15 p.m.29 views

Out-of-bounds

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

7.5CVSS9.5AI score0.01149EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/06/04 3:49 p.m.61 views

CVE-2019-20822

The CVE-2019-20822 issue affects Foxit Reader and PhantomPDF’s 3D Plugin Beta, with an out-of-bounds write caused by incorrect image data in versions prior to 9.7.0.29430. The vulnerability is described across multiple sources as a buffer write/overflow in the 3D Plugin, impacting the plugin comp...

9.8CVSS9.4AI score0.01149EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/05/11 4:15 p.m.7 views

CVE-2020-12751

An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...

7.8CVSS7.4AI score0.00461EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/04/10 12:53 a.m.46 views

Same Origin Policy Bypass

WebKitGTK+ is vulnerable to same origin policy bypass. It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data...

4.3CVSS4.3AI score0.016EPSS
SaveExploits0References24Affected Software1
RedhatCVE
RedhatCVE
added 2020/04/05 5:05 p.m.76 views

CVE-2019-6977

gdImageColorMatch in gdcolormatch.c in the GD Graphics Library aka LibGD 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigg...

8.8CVSS3.6AI score0.71496EPSS
SaveExploits8References2
Fedora
Fedora
added 2020/03/29 1:59 a.m.28 views

[SECURITY] Fedora 30 Update: dcraw-9.28.0-9.fc30

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

8.8CVSS2.4AI score0.02855EPSS
SaveExploits1
Fedora
Fedora
added 2020/03/29 1:37 a.m.52 views

[SECURITY] Fedora 31 Update: dcraw-9.28.0-9.fc31

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

8.8CVSS2.4AI score0.02855EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/03/29 12:00 a.m.29 views

Fedora: Security Advisory for dcraw (FEDORA-2020-545493aa4b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.02855EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
added 2020/03/06 4:02 p.m.16 views

stor.green Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112069 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting stor.green website and it...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/01/27 3:36 a.m.14 views

baanna.go.th Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075687 Security Researcher geeknik Helped patch 8729 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting baanna.go.th website and i...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.56 views

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1251)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.6AI score0.71496EPSS
SaveExploits8References2
Veracode
Veracode
added 2020/01/06 6:11 a.m.13 views

Information Disclosure

endroid/qr-code is vulnerable to information disclosure. The logo is not validated to contain valid image data, allowing an attacker to specify a non-image data and retrieve data from non-image files...

2.7AI score
SaveExploits0
Rows per page
Query Builder