2782 matches found
The vulnerability of the PDF-XChange PDF document viewing and editing program, related to out-of-memory reading, allows attackers to disclose protected information.
The vulnerability of the PDF document viewing and editing software PDF-XChange is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created TIF file...
CVE-2023-41484
An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...
Microsoft Windows Untrusted Script Execution Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...
Heap Buffer Overflow
libwebp.so is vulnerable to Out Of Bounds Memory Write. The vulnerability is due to the BuildHuffmanTable function in src/dec/vp8ldec.c improperly allocating memory to the table when parsing a stream, which results in an application crash or Arbitrary Code Execution when reading a crafted webp...
USN-6367-1: Firefox vulnerability
It was discovered that Firefox did not properly manage memory when handling WebP images. If a user were tricked into opening a webpage containing malicious WebP image file, an attacker could potentially exploit these to cause a denial of service or execute arbitrary code. CVE-2023-4863...
Mars: **"CSRF Vulnerability in ███████ Website Allows Attackers to Change User Profile Picture at ███████"**
The identified vulnerability is a CSRF vulnerability that allowed an attacker to change the user's profile picture on the ███████ website. The vulnerability was successfully reproduced by creating an account, navigating to the profile picture upload section, and utilizing the provided exploit cod...
The vulnerability of the pngimage.c component in the libpng library, which allows a hacker to cause a service failure.
The vulnerability of the pngimage.c component in the libpng library arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PNG file...
USN-6353-1 plib vulnerability
Wooseok Kang discovered that PLIB did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted TGA file, an attacker could possibly use this issue to cause applications using PLIB to crash, resulting in a denial of service, or possibly execut...
Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes olcne (ELSA-2020-5766)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5766 advisory. - x86/speculation: Add SRBDS vulnerability and mitigation documentation Mark Gross Orabug: 31446720 CVE-2020-0543 - x86/speculation: Add Special Regist...
Oracle Linux 7 : exiv2 (ELSA-2019-2101)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...
Fedora 38 : freeimage / mingw-freeimage (2023-a8b26b910d)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a8b26b910d advisory. Update to latest svn revision. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...
Imaging Input Validation Error Vulnerability
Imaging is a simple Go image processing package from the individual developer Grigory Dryapak. A security vulnerability exists in Imaging version 1.6.2, which stems from a vulnerability that allows an attacker to cause a panic in the scanning functionality of Scanner.go via a crafted TIFF file...
The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design tool suite lies in the ability to write code outside the buffer memory, allowing attackers to execute arbitrary code.
The vulnerability of the 3D viewing tool JT/JT2Go, part of the Teamcenter Visualization product lifecycle management system, lies in the ability to write data beyond the buffer limit in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code by introducing a speciall...
File Upload Vulnerability in Categories
Description I noticed, your website is very secure. But you overlooked a flaw File Upload. Proof of Concept Detail: 1 .Login vs admin demo account and access admin page. 2 .Create a category titled "test" and upload a file image. 3 .Using burp suite edit Content-type: image/html and insert payloa...
The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design and simulation tools set by Siemens Solid Edge allows a malicious actor to execute arbitrary code within the context of the current process.
The vulnerability of the 3D viewing tool JT JT2Go, the product lifecycle management system Teamcenter Visualization, and the design and simulation tools set by Siemens Solid Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker t...
SUSE CVE-2023-40745
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
SUSE CVE-2020-21428
Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...
CVE-2020-21679
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...