11403 matches found
UBUNTU-CVE-2020-14382
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...
eastgermanyimages.com Cross Site Scripting vulnerability OBB-1277813
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-1585
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...
Buffer overflow
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
CVE-2020-7374 Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
Description of the security update for Access 2013: August 11, 2020
Description of the security update for Access 2013: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office that could be exploited if a user opens a file that contains a malformed graphics image or inserts a malformed graphics...
LY Corporation: Deleting someone else's profile image with a GraphQL query in programming education service (https://entry.line.me)
LINE entry is a service that provides programming education for children https://entry.line.me. LINE entry provides users with the ability to add profile images. It was possible to delete other people's profile images or thumbnails using a GraphQL query...
USN-4453-1: OpenJDK 8 vulnerabilities
Johannes Kuhn discovered that OpenJDK 8 incorrectly handled access control contexts. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-14556 Philippe Arteau discovered that OpenJDK 8 incorrectly verified names in TLS server's X.509 certificates. An attacker could...
python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2
An out-of-bounds read/write flaw was found in python-pillow, in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable. This flaw allows an attacker to crash the application or potentially execute code on the system. The highest...
Android Security Bulletin—August 2020Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Bludit Directory Traversal Vulnerability
Bludit is an open source, lightweight blog content management system CMS. A security vulnerability exists in Bludit version 3.9.2. A remote attacker can exploit this vulnerability to execute code with the help of the bl-kernel/ajax/upload-images.php file...
Oracle Linux 8 : python-pillow (ELSA-2020-3185)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3185 advisory. - Fix for CVE-2020-5313 Resolves: rhbz1789532 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
OSV-2020-1528 Use-of-uninitialized-value in PushColormapIndex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10379 Crash type: Use-of-uninitialized-value Crash state: PushColormapIndex SyncImage WriteOnePNGImage...
CVE-2020-13971
In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication...
Design/Logic Flaw
In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication...
CVE-2020-13971
In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication...
CVE-2020-13971
Shopware CVE-2020-13971 affects Shopware before 6.2.3. Authenticated users can use the Mediabrowser fileupload to upload SVG images containing JavaScript, causing Persistent XSS. An uploaded image can be accessed without authentication, enabling the attack to be carried out by non-privileged user...
python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2
An out-of-bounds read/write flaw was found in python-pillow, in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable. This flaw allows an attacker to crash the application or potentially execute code on the system. The highest...
Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in...
RLSA-2020:3185 Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in...