Andreas Huggel Exiv2 安全漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 0.27.3 and earlier versions suffer from a heap buffer overflow vulnerability when writing metadata to specially crafted image files. An attacker could exploit this vulnerability to execute code via a...

Travis Ralston matrix-media-repo 资源管理错误漏洞

Travis Ralston matrix-media-repo is a Travis Ralston open source application. A highly customizable multi-domain media repository for Matrix. A security vulnerability exists in matrix-media-repo that stems from an inability to properly process malicious images that are made to be small in file si...

openSUSE: Security Advisory for flatpak, (openSUSE-SU-2021:0520-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-27112

LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images...

CVE-2021-27112

LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images...

Remote code execution

LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images...

CVE-2021-27112

LightCMS v1.3.5 is affected by a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during external image download. The issue enables arbitrary code execution on successful exploitation, with no exploitation details provided in the sources. Affected product: ...

EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2021-1716)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2021-1754)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially...

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-1729)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.CVE-2020-5313 - An out-of-bounds write flaw was...

Description of the security update for Outlook 2016: April 13, 2021 (KB4504712)

None None...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.2 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.2 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

VulnCheck KEV: CVE-2019-14205

A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST'adaptive-images-settings''sourcefile' parameter in adaptive-images-script.php...

SUSE SLES12 Security Update : fwupdate (SUSE-SU-2021:1123-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE-SU-2021:1123-1 Security update for fwupdate

This update for fwupdate fixes the following issues: - Add SBAT section to EFI images bsc1182057...

Cryptomining containers caught coining cryptocurrency covertly

In traditional software development, programmers code an application in one computing environment before deploying it to a similar, but often slightly different environment. This leads to bugs or errors that only show up when the software is deployed—exactly when you need them least. To solve for...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform Operator 1.2 security update

Red Hat Ansible Automation Platform Resource Operator 1.2 technical preview images that fix several security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

SUSE SLES12 Security Update : fwupdate (SUSE-SU-2021:1111-1)

This update for fwupdate fixes the following issues : Add SBAT section to EFI images bsc1182057 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

openSUSE Security Update : flatpak / libostree / xdg-desktop-portal / etc (openSUSE-2021-520)

This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues : libostree : Update to version 2020.8 - Enable LTO. bsc1133120 - This update contains scalability improvements and bugfixes. - Caching-related HTTP headers are now supported on summaries and...

openSUSE Security Update : fwupd (openSUSE-2021-522)

This update for fwupd fixes the following issues : - Update to version 1.2.14: bsc1182057 - Add SBAT section to EFI images bsc1182057 - CVE-2020-10759: Validate that gpgmeopverifyresult returned at least one signature bsc1172643 This update was imported from the SUSE:SLE-15-SP2:Update update...