Lucene search
+L

16 matches found

RedhatCVE
RedhatCVE
•added 2026/09/23 11:03 a.m.•9 views

CVE-2026-84451

A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...

6.5CVSS5.7AI score0.00311EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/05/16 8:14 a.m.•50 views

libtiff: integer overflow in function TIFFReadRGBATileExt of the file

An integer overflow flaw was found in LibTIFF. This issue exists in the TIFFReadRGBATileExt function of the libtiff/tifgetimage.c file, and may lead to a buffer overflow...

8.8CVSS6.2AI score0.01331EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/12/09 12:00 a.m.•63 views

SquaredUp for SCOM Cross-Site Scripting Vulnerability

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...

5.4CVSS2.1AI score0.00605EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/07 1:15 p.m.•16 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS6.1AI score0.00605EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/07 1:15 p.m.•18 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/07 1:15 p.m.•32 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS0.00605EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/07 1:15 p.m.•32 views

Cross site scripting

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

3.5CVSS5.3AI score0.00605EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/12/07 12:42 p.m.•56 views

CVE-2021-40092

The CVE-2021-40092 entry describes a cross-site scripting (XSS) vulnerability in the Image Tile feature of SquaredUp for SCOM 5.2.1.6654. The issue allows remote attackers to inject arbitrary web script or HTML via an SVG file. Connected sources corroborate the same description across multiple fe...

5.4CVSS5.2AI score0.00605EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•18 views

Squaredup 跨站脚本漏洞

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...

5.4CVSS5.4AI score0.00605EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•6 views

PT-2021-22801

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in the Image Tile component allows remote attackers to inject arbitrary web script or HTML via an SVG file. This enables attackers to execute malicious scripts ...

5.4CVSS0.00605EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•6 views

CVE-2021-40092: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
•added 2018/04/10 3:29 p.m.•35 views

CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

8.8CVSS8.4AI score0.01765EPSS
SaveExploits0References2
Mend
Mend
•added 2018/04/10 3:00 p.m.•4 views

CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

8.8CVSS0.01765EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/10 12:00 a.m.•6 views

CVE-2014-0158: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

8.8CVSS7.9AI score0.01765EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2017/03/01 3:59 p.m.•7 views

DEBIAN-CVE-2016-10094

Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image...

7.8CVSS7.9AI score0.01813EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2016/12/31 12:00 a.m.•3 views

PT-2016-4578

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is caused by an off-by-one error in the t2p readwrite pdf image tile function in tools/tiff2pdf.c. This error allows remote attackers to have an unspecified impact via a crafted image. Recommendation...

7.8CVSS0.02365EPSS
SaveExploits3References77
Rows per page
Query Builder