Philips Intellispace Portal Unauthorized Access Vulnerability (CNVD-2018-03808)

The Philips Intellispace Portal handles clinical images from different modalities and enables advanced visualization of images. ISP systems are deployed in the healthcare and public health sectors. An unauthorized access vulnerability exists in Philips Intellispace Portal, which could be exploite...

Philips Intellispace Portal elevation of privilege vulnerability (CNVD-2018-03814)

The Philips Intellispace Portal processes clinical images from different modalities and enables advanced visualization of images.ISP systems are deployed in the healthcare and public health sectors. An elevation of privilege vulnerability exists in Philips Intellispace Portal that could allow an...

Philips Intellispace Portal Unauthorized Access Vulnerability

The Philips Intellispace Portal handles clinical images from different modalities and enables advanced visualization of images. ISP systems are deployed in the healthcare and public health sectors. An unauthorized access vulnerability exists in Philips Intellispace Portal, which could be exploite...

Philips Intellispace Portal Unauthorized Access Vulnerability (CNVD-2018-03809)

The Philips Intellispace Portal handles clinical images from different modalities and enables advanced visualization of images. ISP systems are deployed in the healthcare and public health sectors. An unauthorized access vulnerability exists in Philips Intellispace Portal, which could be exploite...

Code injection

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the XPS...

CVE-2018-4909

Adobe Acrobat Reader CVE-2018-4909 affects versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The flaw arises from computing on data past the end of a target buffer in the image conversion module when processing JPEG metadata, potentially exposing sen...

Philips Intellispace Portal ISP Vulnerabilities

OVERVIEW Philips reported vulnerabilities in the Philips’ IntelliSpace Portal ISP, an advanced visualization and image analysis system. Philips is creating a software update to mitigate these vulnerabilities in the affected products. Additionally, they are issuing mitigating controls for some...

Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Moving from Unidesk to Citrix App Layering

Although they are based on the same layering technology, Unidesk version 2 and 3 are very different from Citrix App Layering formerly Unidesk version 4. This document lays out the major product differences for exiting version 2 and 3 customers to help them understand those differences and plan fo...

Adobe Acrobat Pro DC ImageConversion XPS TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

arcaidimages.com XSS vulnerability

Open Bug Bounty ID: OBB-566015 Description| Value ---|--- Affected Website:| arcaidimages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

openSUSE Security Update : libXcursor (openSUSE-2018-196)

This update for libXcursor fixes the following issues : - CVE-2017-16612: It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments. boo1065386 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

DEBIAN-CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

openSUSE: Security Advisory for plasma5-workspace (openSUSE-SU-2018:0397-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 27 Update: w3m-0.5.3-36.git20180125.fc27

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

Security update for plasma5-workspace (important)

This update for plasma5-workspace fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2018-6790: Desktop notifications could have been used to load arbitrary remote images into Plasma, allowing for client IP discovery boo1079429 - CVE-2018-6791: A specially crafted fil...

Security update for plasma5-workspace (important)

This update for plasma5-workspace fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2018-6790: Desktop notifications could have been used to load arbitrary remote images into Plasma, allowing for client IP discovery boo1079429 - CVE-2018-6791: A specially crafted fil...

OPENSUSE-SU-2018:0397-1 Security update for plasma5-workspace

This update for plasma5-workspace fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2018-6790: Desktop notifications could have been used to load arbitrary remote images into Plasma, allowing for client IP discovery boo1079429 - CVE-2018-6791: A specially crafted fil...

GraphicsMagick Denial of Service Vulnerability (CNVD-2018-05364)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'AcquireCacheNexus' function of the magick/pixelcache.c file in GraphicsMagick versions prior to 1.3.28. A remote...