Lucene search
+L

2793 matches found

OSV
OSV
added 2021/01/26 6:15 p.m.12 views

CVE-2020-35844

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0xbe9c4...

7.8CVSS7.1AI score0.00919EPSS
SaveExploits1References2
NVD
NVD
added 2021/01/26 6:15 p.m.26 views

CVE-2020-35844

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0xbe9c4...

7.8CVSS7.7AI score0.00919EPSS
SaveExploits1References2
Prion
Prion
added 2021/01/26 6:15 p.m.19 views

Out-of-bounds

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0x96cf...

6.8CVSS7.7AI score0.00886EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/01/26 6:15 p.m.17 views

Out-of-bounds

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0xbe9c4...

6.8CVSS7.7AI score0.00919EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/25 7:07 p.m.27 views

CVE-2020-35843

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0x956e...

5.7AI score0.00749EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/01/13 12:00 a.m.35 views

Debian: Security Advisory (DLA-2523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.07508EPSS
SaveExploits8References4
OSV
OSV
added 2021/01/12 3:15 p.m.14 views

CVE-2021-21462

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

8.8CVSS6.1AI score0.01199EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/01/12 3:15 p.m.7 views

CVE-2021-21458

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

8.8CVSS6.3AI score0.01199EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.13 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
Exploit DB
Exploit DB
added 2020/12/22 12:00 a.m.223 views

Victor CMS 1.0 - File Upload To RCE

Exploit Title: Victor CMS 1.0 - File Upload To RCE Date: 20.12.2020 Exploit Author: Mosaaed Vendor Homepage: https://github.com/VictorAlagwu/CMSsite Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0 Tested on: Apache2/Linux Step1: register...

5.3AI score
SaveExploits0
FreeBSD
FreeBSD
added 2020/12/17 12:00 a.m.46 views

ImageMagick6 -- multiple vulnerabilities

CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw was found in ImageMagick in versions before 6.9.12, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an...

7.8CVSS2.4AI score0.07508EPSS
SaveExploits1
Apple
Apple
added 2020/12/15 5:56 a.m.84 views

About the security content of tvOS 14.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS0.8AI score0.03398EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/12/15 12:00 a.m.74 views

Industrial Light and Magic Academy Software Foundation OpenEXR code issue vulnerability

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS1.4AI score0.01219EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/12/15 12:00 a.m.66 views

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19857)

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

5.5CVSS3.4AI score0.01148EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/09 9:15 p.m.5 views

DEBIAN-CVE-2020-16587

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...

5.5CVSS6.9AI score0.01255EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/12/09 12:00 a.m.17 views

Industrial Light And Magic OpenEXR 代码问题漏洞

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS6.9AI score0.01219EPSS
SaveExploits1References9
Veracode
Veracode
added 2020/12/06 3:34 a.m.27 views

Denial Of Service (DoS)

OptiPNG is vulnerable to denial of service. An attacker may cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

8.8CVSS6.3AI score0.03974EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2020/12/06 3:33 a.m.32 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in the function SVGKeyValuePairs in coders/svg.c allows an attacker to cause a denial of service via a malicious image file...

5.5CVSS4.9AI score0.01736EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2020/12/06 3:29 a.m.41 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. The vulnerability existed because of an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted psd image file...

6.5CVSS4.2AI score0.02975EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2020/12/06 3:28 a.m.29 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service attacks.Not checking the return value of the fputc function allows Remote attackers to cause a denial of service conditions via a crafted image file...

6.5CVSS5.1AI score0.0308EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder