11171 matches found
Reflected XSS in svg logo generation (NC-SA-2019-018)
A reflected Cross-Site Scripting vunerability was discovered in the svg generation...
openSUSE Security Update : ImageMagick (openSUSE-2019-1795)
This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425. This update was imported from the SUSE:SLE-15:Update upda...
Security update for ImageMagick (moderate)
openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2019:1795-1 Rating: moderate References: 1138425 1138464 Cross-References: CVE-2019-11597 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is n...
Adobe Bridge CC SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG...
Outlook on the web Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability has been discovered that affects Outlook on the web formerly known as Outlook Web App on-premise deployments. To exploit this vulnerability, an attacker must send a victim an email containing custom HTML content. The victim must then drag and drop an image tha...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1773-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. Fixed a file content disclosure via SVG and WMF decoding bsc1138425. Note that Tenable Network Security has extracted the precedin...
APSB19-37 Security update available for Adobe Bridge CC
Adobe has released a security update for Adobe Bridge CC. This update addresses a vulnerability rated important that occurs when parsing malformed SVG images. This can result in an out-of-bounds memory read which leads to information memory address disclosure in the context of current user...
SUSE-SU-2019:1773-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425...
Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS
Also Full Path Disclosure depending on the configuration of the server https:///wp-content/plugins/photoblocks-grid-gallery/admin/partials/photoblocks-edit.php?id="...
EulerOS 2.0 SP5 : qt (EulerOS-SA-2019-1688)
According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19869 Note that Tenable...
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1683-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
June 27, 2019—KB4501375 (OS Build 18362.207)
None None...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1712-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. Fixed a file content disclosure via SVG and WMF decoding bsc1138425.- CVE-2019-11472: Fixed a denial of service in ReadXWDImage...
Updated graphicsmagick packages fix security vulnerabilities
GraphicsMagick 1.3.32 is now released, fixing another 52 additional issues detected by oss-fuzz. Of special mention is a bug reported to us by "Battle Furry" via our security mail alias. This bug was considered to be a "feature" allows including file text as rendered text on a graphic image, or a...
MGASA-2019-0194 Updated graphicsmagick packages fix security vulnerabilities
GraphicsMagick 1.3.32 is now released, fixing another 52 additional issues detected by oss-fuzz. Of special mention is a bug reported to us by "Battle Furry" via our security mail alias. This bug was considered to be a "feature" allows including file text as rendered text on a graphic image, or a...
June 20, 2019—KB4503283 (Preview of Monthly Rollup)
None None...
June 20, 2019—KB4503271 (Preview of Monthly Rollup)
None None...
Concrete5 <= 8.4.3 XSS Vulnerability
Concrete5 is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross-site Scripting (XSS)
concrete5/concrete5 is vulnerable to cross-site scripting attacks. The library does not sanitize imported SVG files, allowing a malicious user to inject and execute arbitrary web script into a victim's browser...
