65 matches found
Low: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.3. BZ1880984 Security Fixes: exiv2: out-of-bounds read in...
exiv2 security, bug fix, and enhancement update
An update is available for exiv2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The exiv2 packages provide a command line utility which can display and...
Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress
PoC exploit for CVE-2019-8942 and CVE-2019-8943, a pair of vulne...
CVE-2021-29457 Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...
CVE-2021-24230
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the victim’s account once visited. If exploited, this bug can be used to overwrite t...
CVE-2021-24230
Vulnerability (CVE-2021-24230) is a CSRF in the Patreon WordPress plugin prior to 1.7.0. An authenticated attacker visiting a page could cause a logged-in user to overwrite or create arbitrary user metadata, specifically the wp_capabilities meta, altering the user’s roles and privileges and poten...
exiv2 security update
CentOS Errata and Security Advisory CESA-2020:4030 An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
CVE-2020-8817
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...
h1-ctf: [H1-2006 2020] Bypassing access control checks by modifying the URL, internal application state, or the HTML page, or using a custom API attack tool
H1-2006 CTF Writeup F859938 Summary: Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information disclosure, modification or destruction of all data, or performing a business function outside of the limits of...
Moderate: Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
ALSA-2020:1577 Moderate: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.2. BZ1651917 Security Fixes: exiv2: infinite loop and hang in...
USN-4159-1: Exiv2 vulnerability
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...
[SECURITY] Fedora 29 Update: libmodulemd-2.2.3-3.fc29
C Library for manipulating module metadata files. See https://github.com/fedora-modularity/libmodulemd/blob/master/README.md for more details...
[SECURITY] Fedora 30 Update: libmodulemd-2.2.3-3.fc30
C Library for manipulating module metadata files. See https://github.com/fedora-modularity/libmodulemd/blob/master/README.md for more details...
Access Restriction Bypass
wordpress is vulnerable to Access Restriction Bypass. The vulnerability exists because it can leads to unauthorized deletion of files just by manipulating metadata...
[SECURITY] Fedora 25 Update: modulemd-1.3.2-1.fc25
A python library for manipulation of the proposed module metadata format...
PHP 5.5.x < 5.5.32 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.32. It is, therefore, affected by multiple vulnerabilities : - The Perl-Compatible Regular Expressions PCRE library is affected by multiple vulnerabilities related to the handling of regular...
[SECURITY] Fedora 17 Update: libkexiv2-4.10.5-1.fc17
Libkexiv2 is a wrapper around Exiv2 library to manipulate pictures metadata as EXIF/IPTC and XMP...