EulerOS Virtualization 3.0.2.2 : gd (EulerOS-SA-2020-1464)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via...

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2020-1473)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the 'crafted image file'...

EulerOS Virtualization 3.0.2.2 : netpbm (EulerOS-SA-2020-1470)

According to the version of the netpbm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service...

EulerOS 2.0 SP3 : gd (EulerOS-SA-2020-1384)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of servic...

WHM 0.82.19 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications =================================================== Title : WHM v0.82.16 Twitter : @H3xr4in BLog : https://sudo-security.github.io 0day.today 2020-07-19...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as an integer overflow flaw was found in the PHP exif extension. On 32-bit systems, a specially-crafted image file could cause the PHP interpreter to crash or disclose portions of its memory when a PHP script tries to extract...

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly,...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. Multiple missing input sanitization flaws were discovered in PHP's exif extension. A specially-crafted image file could cause the PHP interpreter to crash or, possibly, disclose portions of its memory when a PHP script tried to extract Exchangeable...

Privilege Escalation

ibm java is vulnerable to privilege escalation. A remote attacker is able to obtain higher privileges using a malicious image file...

Privilege Escalation

ibm java is vulnerable to privilege escalation. A remote attacker is able to obtain higher privileges using a malicious image file...

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in LittleCMS. An application using color profiles could crash while converting a specially-crafted image file...

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

The vulnerability of the exif_process_IFDTag function in the PHP programming language allows a perpetrator to gain unauthorized access to information or cause service failures.

The vulnerability of the exifprocessIFDTagName function in the PHP programming language is related to the execution of an operation that exceeds the permissible buffer data limits. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information or cause servic...

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...