91 matches found
ClassApps SelectSurvey.NET SQL注入漏洞
Net is a survey software from ClassApps, Inc. built using Microsoft's cutting-edge . A SQL injection vulnerability exists in the ID parameter of the UploadedImageDisplay.aspx endpoint, which can be exploited by an unauthenticated attacker to retrieve data from the application's back-end database...
ClassApps SelectSurvey.NET 安全漏洞
ClassApps SelectSurvey.Net is a survey software from ClassApps USA built using Microsoft's cutting-edge . A security vulnerability in the UploadedImageDisplay.aspx endpoint of ClassApps SelectSurvey.NET before 5.052.000 allows remote, unauthenticated attackers to retrieve survey user-submitted da...
[SECURITY] Fedora 35 Update: ImageMagick-6.9.12.31-1.fc35
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
Geutebruck Camera Deface
This module will take an existing session on a vulnerable Geutebruck Camera and will allow the user to either freeze the camera and display the last image from the video stream, display an image on the camera, or restore the camera back to displaying the current feed/stream. Module Options msf us...
Memory Leaks
ImageMagick is vulnerable to memory leaks. It is possible because an image display and manipulation tool for the X Window System can read and write multiple image formats...
Design/Logic Flaw
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
SUSE SLED15 / SLES15 Security Update : LibreOffice (SUSE-SU-2019:1894-1)
This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.5.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : If there is no firebird engine we still need java to run hsqldb bsc1135189 PPTX: Rectangle...
CVE-2018-0526
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors...
Code injection
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors...
CVE-2018-0526
CVE-2018-0526 affects Cybozu Office 10.0.0–10.7.0. The vulnerability in the Message component allows remote attackers to cause information disclosure by causing an external image to be displayed, effectively exposing an image located on an external server via unspecified vectors. Impact, per the ...
CVE-2018-0526
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors...
Security Bulletin: IBM Datacap Taskmaster Capture ActiveX Vulnerability (CVE-2014-0879)
Summary Taskmaster Web uses ActiveX controls to perform scanning and to display images in the browser on the client computer. One of the controls was found vulnerable to crafted hacking. Vulnerability Details CVEID: CVE-2014-0879 DESCRIPTION: Security vulnerability with Datacap ActiveX installed ...
CVE-2017-14450
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
CVE-2017-14448
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
Design/Logic Flaw
An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to...
[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.38-1.fc26
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
[SECURITY] Fedora 28 Update: ImageMagick-6.9.9.38-1.fc28
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.22-1.fc26
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.22-1.fc27
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.15-1.fc26
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...