Lucene search
K

2680 matches found

CNVD
CNVD
added 2020/12/15 12:0 a.m.34 views

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19857)

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

5.5CVSS3.4AI score0.01134EPSS
Exploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.27 views

Industrial Light and Magic Academy Software Foundation OpenEXR code issue vulnerability

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS1.4AI score0.01204EPSS
Exploits1References1
OSV
OSV
added 2020/12/09 9:15 p.m.1 views

DEBIAN-CVE-2020-16587

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...

5.5CVSS6.9AI score0.01239EPSS
Exploits1References1
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.3 views

Industrial Light And Magic OpenEXR 代码问题漏洞

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS6.9AI score0.01204EPSS
Exploits1References9
Veracode
Veracode
added 2020/12/06 3:34 a.m.23 views

Denial Of Service (DoS)

OptiPNG is vulnerable to denial of service. An attacker may cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

8.8CVSS6.3AI score0.03974EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2020/12/06 3:33 a.m.27 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in the function SVGKeyValuePairs in coders/svg.c allows an attacker to cause a denial of service via a malicious image file...

5.5CVSS4.9AI score0.01736EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2020/12/06 3:29 a.m.31 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. The vulnerability existed because of an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted psd image file...

6.5CVSS4.2AI score0.02975EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2020/12/06 3:28 a.m.23 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service attacks.Not checking the return value of the fputc function allows Remote attackers to cause a denial of service conditions via a crafted image file...

6.5CVSS5.1AI score0.0308EPSS
Exploits0References6Affected Software1
CNVD
CNVD
added 2020/11/20 12:0 a.m.1 views

Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

6.8AI score
Exploits0
CNVD
CNVD
added 2020/11/12 12:0 a.m.1 views

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66605)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

6.8AI score
Exploits0
CNVD
CNVD
added 2020/11/12 12:0 a.m.1 views

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66604)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

6.8AI score
Exploits0
CNVD
CNVD
added 2020/11/12 12:0 a.m.1 views

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66602)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

6.8AI score
Exploits0
Apple
Apple
added 2020/11/05 12:0 a.m.104 views

About the security content of tvOS 14.2

About the security content of tvOS 14.2 This document describes the security content of tvOS 14.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS8.8AI score0.03207EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/11/02 12:0 a.m.1 views

Apple macOS Catalina buffer overflow vulnerability (CNVD-2020-60824)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which originates from viewing a maliciously created JPEG file could lead to arbitrary code execution. No details of...

7.8CVSS7.4AI score0.00975EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/29 12:0 a.m.2 views

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2020-59779)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

7.8CVSS8.1AI score0.03534EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/29 12:0 a.m.2 views

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59767)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

7.8CVSS6AI score0.02865EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/19 12:0 a.m.24 views

Ubuntu 16.04 LTS : Collabtive vulnerability (USN-4590-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4590-1 advisory. It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause...

8.8CVSS8.3AI score0.03781EPSS
Exploits3References2
NVD
NVD
added 2020/10/16 11:15 p.m.18 views

CVE-2020-17022

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

7.8CVSS0.03593EPSS
Exploits0References1
EUVD
EUVD
added 2020/10/16 10:18 p.m.4 views

EUVD-2020-8979

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

7.8CVSS7.7AI score0.03593EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2020/10/15 7:0 a.m.78 views

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

7.8CVSS3.8AI score0.03593EPSS
Exploits0
Rows per page
Query Builder