222 matches found
CVE-2019-15740
GitLab CE/EE versions 7.9–12.2.1 are affected by CVE-2019-15740 due to EXIF geolocation data not being removed from certain image uploads, enabling disclosure of location metadata. Root cause: failure to strip EXIF data during uploads. Impact: potential exposure of geolocation information. Mitiga...
CVE-2019-15740
An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads...
CVE-2019-15740
Removed by vendor...
Craft CMS 2.7.9/3.2.5 - Information Disclosure
Exploit Title : CraftCms Users information disclosure From uploaded File Author Discovered By : Mohammed Abdul Raheem Author's Company Name : TrekShield IT Solution Author Exploit-db : https://www.exploit-db.com/?author=9783 Found Vulnerability On : 20-07-2019 Vendor Homepage:https://craftcms.com...
Debian: Security Advisory (DLA-1822-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1822-1 : php-horde-form security update
The Horde Application Framework contained a remote code execution vulnerability. A remote attacker could use this flaw to use image uploads in forms to install and execute a file in an arbitrary writable location on the server. For Debian 8 'Jessie', this problem has been fixed in version...
[SECURITY] [DLA 1822-1] php-horde-form security update
Package : php-horde-form Version : 2.0.8-2+deb8u1 CVE ID : CVE-2019-9858 Debian Bug : 930321 The Horde Application Framework contained a remote code execution vulnerability. A remote attacker could use this flaw to use image uploads in forms to install and execute a file in an arbitrary writable...
Fedora 29 : php-horde-Horde-Form (2019-8fe9d427f1)
HordeForm 2.0.19 - mjr SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program. Note that Tenable Network Security has extracted the preceding description...
Fedora 28 : php-horde-Horde-Form (2019-fb2ce5f6d9)
HordeForm 2.0.19 - mjr SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program. Note that Tenable Network Security has extracted the preceding description...
CVE-2018-19196
An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types jpg, jpeg, bmp, png, gif, as demonstrated by an...
CVE-2018-18381
Z-BlogPHP 1.5.2.1935 Zero has a stored XSS Vulnerability in zbsystem/function/csystemadmin.php via the Content-Type header during the uploading of image attachments...
CVE-2018-17055
An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads...
CVE-2018-17055
An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads...
Design/Logic Flaw
An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads...
CVE-2018-17055
CVE-2018-17055 affects Progress Sitefinity CMS, versions 4.0 through 11.0. The issue is an arbitrary file upload vulnerability related to image uploads. The provided documents do not specify the exact attack vector, exploit details, or affected components beyond the image-upload context, nor do t...
CVE-2018-17055
An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads...
Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance Path Traversal Vulnerability
The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Firepower 9300 Security Appliance are both products of Cisco Corporation.The Cisco Firepower 4100 Series The Cisco Firepower 4100 Series Next-Generation Firewall NGFW is a 4100-series firewall product, and the Firepower 9300...
CVE-2017-8080
Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image uploads...