@edropin/canvas (>=1.1.0 <=2.0.0), @launchtray/hatch-test-pdf (>=0.11.2 <=0.23.0-alpha.17) +15 more potentially affected by CVE-2020-8132 via pdf-image (>=1.1.0 <=2.0.0)

pdf-image NPM version =1.1.0, =1.1.0, =0.11.2, =0.2.0, =0.0.2, =0.13.0-beta.1, =0.0.2, =0.0.12, =0.19.5, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =1.0.0, =1.0.5 and more Source cves: CVE-2020-8132 Source advisory: OSV:GHSA-RV7P-MMWQ-X674...

CVE-2021-29453 Denial of service through memory exhaustion

matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in term...

CVE-2021-29136

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used...

Apple 多款产品缓冲区错误漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is a set of operating systems developed for mobile devices.Apple watchOS is a set of operating systems for smartwatches.Apple iPadOS is a set of operating systems for iPad tablets.Apple iOS is a set of operating systems developed for mobile...

CVE-2021-28306

CVE-2021-28306 affects the Rust fltk crate (before 0.15.3). The issue is a NULL pointer dereference when using a multi-label type if the image is nonexistent (also mapped to an out-of-bounds read in related advisories). The root cause is dereferencing a null/invalid image reference, potentially l...

Vulnerability of the p_print_image() function (device/gdevcdj.c) in the software suite for processing, transforming, and generating Ghostscript documents, allowing a hacker to trigger a service failure

The vulnerability of the pprintimage function device/gdevcdj.c in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Regular Expression Denial of Service (ReDoS)

Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. ReDoS is possible via the addImage function. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

CVE-2020-35467

The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-29575

The official elixir Docker images before 1.8.0-alpine Alpine specific contain a blank password for a root user. Systems using the elixir Linux Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-29578

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...

HiddenBytes (=0.1.0), Rust-wasm (=0.1.0) +726 more potentially affected by CVE-2020-35916 via image (>=0.10.4 <=0.23.10)

image CARGO version =0.10.4, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-35916 Source advisory: OSV:RUSTSEC-2020-0073...

Microsoft Windows Kernel Image Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows kernel image. The...

PT-2021-6569 · Gthumb +3 · Gthumb +3

Name of the Vulnerable Software and Affected Versions: gThumb versions prior to 3.10.1 Description: The issue is related to insufficient input validation in the gThumb image processing application. It allows a remote attacker to cause a denial of service via a malformed JPEG image. Recommendation...

agneta-platform (>=0.13.0-beta.1 <=0.13.0-beta.9), aon (>=0.0.2 <=0.3.2) +6 more potentially affected by CVE-2018-3757 via pdf-image (=1.1.0)

pdf-image NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdf-image and may be impacted: - agneta-platform =0.13.0-beta.1, =0.0.2, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =0.0.1, =0.0.3 Source cves: CVE-2018-3757 Source advisory:...

react-native-fast-image information disclosure vulnerability

react-native-fast-image is an image loading and processing package by Canadian software developer Dylan Vann. An information disclosure vulnerability exists in react-native-fast-image, which can be exploited by an attacker to cause signature credentials or other session tokens to be disclosed to...

PT-2020-6102 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.5 Apple iPadOS versions prior to 13.5 Apple macOS Catalina versions prior to 10.15.5 Apple tvOS versions prior to 13.4.5 Apple watchOS versions prior to 6.2.5 Apple iTunes for Windows versions prior to 12.10.7...

419ms.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1165795 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially created dib file...

Information Disclosure

containers/image is vulnerable to information disclosure. The vulnerability exists as it reads entire image manifest into memory...

infodebit.md Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098726 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...