407 matches found
CVE-2022-23475: Improper Neutralization of Input During Web Page Generation
daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting XSS and cross site request forgery CSRF vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected in...
Fedora: Security Advisory for advancecomp (FEDORA-2022-99c00af79f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: advancecomp-2.4-1.fc37
AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. The official site of AdvanceCOMP is: https://www.advancemame.it This package contains: advzip - Recompression and test utility for zip files advpng - Recompression utility for png fil...
[SECURITY] Fedora 36 Update: advancecomp-2.4-1.fc36
AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. The official site of AdvanceCOMP is: https://www.advancemame.it This package contains: advzip - Recompression and test utility for zip files advpng - Recompression utility for png fil...
PT-2022-36633
Name of the Vulnerable Software and Affected Versions pngcheck versions prior to 3.0.3 Description The issue concerns a crash bug and probable vulnerability in pngcheck, specifically in large MNG LOOP chunks and interlaced images with extra compressed data beyond the nominal end of the image data...
Security update for pngcheck (moderate)
openSUSE Security Update: Security update for pngcheck Announcement ID: openSUSE-SU-2022:10142-1 Rating: moderate References: 1202662 Cross-References: CVE-2020-35511 CVSS scores: CVE-2020-35511 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma
Detailed Report: https://oss-fuzz.com/testcase?key=4779117987364864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EncodePixelGamma...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in CompositeImage
Detailed Report: https://oss-fuzz.com/testcase?key=4719237721096192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CompositeImage CoalesceImages...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in LosslessReduceDepthOK
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4606568078901248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:encoder_mng_fuzzer: Heap-use-after-free in CloseBlob
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5822757906022400 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cra...
imagemagick:encoder_mng_fuzzer: Heap-use-after-free in ReadMNGImage
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5135071096471552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Cra...
graphicsmagick:enhance_fuzzer: Heap-use-after-free in CloseBlob
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5386410326097920 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 4...
graphicsmagick:coder_MNG_fuzzer: Use-of-uninitialized-value in ReadOnePNGImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5641595402190848 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
Mageia: Security Advisory (MGASA-2021-0115)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nomacs has an unspecified vulnerability
Nomacs is a free open source image viewer for viewing all common image formats, including Raw and Psd images. It is used to view all common image formats, including Raw and Psd images. Nomacs v3.15.0 contains a security vulnerability that could be exploited by an attacker to cause a denial of...
CVE-2020-23884
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...
CVE-2020-23884
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...
CVE-2020-23884
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...