Lucene search
K

2680 matches found

NVD
NVD
added 2023/10/21 12:15 a.m.6 views

CVE-2023-45664

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...

8.8CVSS8.3AI score0.00867EPSS
Exploits0References5
NVD
NVD
added 2023/10/21 12:15 a.m.19 views

CVE-2023-45661

stbimage is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbigifloadnext. This happens because twoback points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory...

7.1CVSS7AI score0.00574EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/10/20 11:26 p.m.20 views

CVE-2023-45661 Wild address read in stbi__gif_load_next in stb_image

stbimage is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in stbigifloadnext. This happens because twoback points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory...

6.5CVSS6.7AI score0.00574EPSS
Exploits0References6
Prion
Prion
added 2023/10/20 7:15 a.m.28 views

Cross site scripting

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image file path parameter in versions up to, and including, 0.9.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...

4.3CVSS4.7AI score0.00328EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/10/19 3:15 p.m.1 views

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

7.8CVSS5.9AI score
Exploits0References4
Prion
Prion
added 2023/10/19 3:15 p.m.14 views

Code injection

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

4.4CVSS7.9AI score0.00538EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/10/19 1:15 p.m.1 views

CVE-2023-43252

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

7.8CVSS5.8AI score0.00522EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/10/19 1:15 p.m.1 views

CVE-2023-43252

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

7.8CVSS5.8AI score0.00522EPSS
Exploits1References5
NVD
NVD
added 2023/10/19 1:15 p.m.10 views

CVE-2023-43252

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

7.8CVSS7.5AI score0.00522EPSS
Exploits1References4
Prion
Prion
added 2023/10/19 1:15 p.m.14 views

Buffer overflow

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

4.4CVSS7.4AI score0.00522EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/19 12:0 a.m.14 views

CVE-2023-43252

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

6.8AI score0.00522EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/10/19 12:0 a.m.10 views

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

7.5AI score0.00538EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/10/19 12:0 a.m.3 views

XNSoft Nconvert Security Vulnerability

XNSoft Nconvert is a powerful command line multi-platform batch image processor from XNSoft with over 80 commands. A security vulnerability exists in XNSoft Nconvert version 7.136, which originated from a vulnerability that allows an attacker to cause damage to the Exception Handler Chain via a...

7.8CVSS7AI score0.00538EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/10/19 12:0 a.m.13 views

CVE-2023-43252

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file...

7.7AI score0.00522EPSS
Exploits1References4
NVD
NVD
added 2023/10/18 4:15 p.m.14 views

CVE-2023-43250

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

7.8CVSS7.9AI score0.00624EPSS
Exploits1References4
Prion
Prion
added 2023/10/18 4:15 p.m.19 views

Buffer overflow

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

4.4CVSS7.9AI score0.00624EPSS
Exploits1References4Affected Software1
Ubuntu
Ubuntu
added 2023/10/18 2:40 p.m.63 views

USN-6437-1: VIPS vulnerabilities

Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into processing a specially crafted input image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubunt...

7.5CVSS6.6AI score0.02297EPSS
Exploits3
Cvelist
Cvelist
added 2023/10/18 12:0 a.m.16 views

CVE-2023-43250

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

8.1AI score0.00624EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/10/18 12:0 a.m.14 views

CVE-2023-43250

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

7.5AI score0.00624EPSS
Exploits1References4
Redos
Redos
added 2023/10/16 12:0 a.m.23 views

ROS-20231016-01

Vulnerability of XpmCreateXpmImageFromBuffer function of libXpm image file library is related to a read error call. is related to a read error outside the valid range. Exploitation of the vulnerability could allow an intruder to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.00365EPSS
Exploits0
Rows per page
Query Builder