Lucene search
+L

316 matches found

NVD
NVD
added 2017/09/17 11:29 p.m.26 views

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.3AI score0.01849EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/17 11:29 p.m.6 views

DEBIAN-CVE-2017-14518

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document...

7.8CVSS8AI score0.01849EPSS
SaveExploits1References1
Snyk
Snyk
added 2017/09/17 11:29 p.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files. Remediation There is no fixed version for...

7.8CVSS6.8AI score0.01849EPSS
SaveExploits1References2
Snyk
Snyk
added 2017/09/17 11:29 p.m.12 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References -...

7.8CVSS6.8AI score0.01849EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2017/09/17 11:00 p.m.31 views

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

6.3AI score0.01849EPSS
SaveExploits1References2
CVE
CVE
added 2017/09/17 11:00 p.m.118 views

CVE-2017-14520

Poppler 0.59.0 contains a vulnerability where a floating point exception can occur in Splash::scaleImageYuXd() inside Splash.cc when processing crafted PDFs, potentially enabling an attack via malicious files. Connected advisories from multiple distributions (openSUSE SUSE-2018:648, SUSE-SU-2018:...

7.8CVSS6.1AI score0.01849EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2017/09/17 11:00 p.m.44 views

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.5AI score0.01849EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2017/09/17 12:00 a.m.38 views

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.8AI score0.01849EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/17 12:00 a.m.8 views

UBUNTU-CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

7.8CVSS6.8AI score0.01849EPSS
SaveExploits1References3
OSV
OSV
added 2017/09/17 12:00 a.m.12 views

UBUNTU-CVE-2017-14518

In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired function in Splash.cc via a crafted PDF document...

7.8CVSS6.8AI score0.01849EPSS
SaveExploits1References3
CNVD
CNVD
added 2017/09/11 12:00 a.m.9 views

Linux PDF rendering engine poppler SplashOutputDev.cc SplashOutputDev::type3D0() is vulnerable to a null pointer reference.

Poppler is used to generate a PDF of the C++ class library , from xpdf inheritance. Linux PDF rendering engine poppler SplashOutputDev.cc SplashOutputDev::type3D0 there is a null pointer reference vulnerability. An attacker could cause a denial of service attack when processing a malicious PDF fi...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2017/08/25 12:00 a.m.9 views

Cloud4Wi Splash Portal Cross-Site Scripting Vulnerability

Cloud4Wi is a suite of customer Wi-Fi service platforms from Cloud4Wi, Inc. in the U.S. Splash Portal is one of the Wi-Fi portals. A cross-site scripting vulnerability exists in Splash Portal in Cloud4Wi versions prior to 5.9.7. A remote attacker can exploit this vulnerability to inject arbitrary...

6.1CVSS5.9AI score0.0229EPSS
SaveExploits1References1
Prion
Prion
added 2017/08/24 9:29 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

4.3CVSS6.2AI score0.0229EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2017/08/24 9:29 p.m.14 views

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

6.1CVSS6.1AI score0.0229EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2017/08/24 9:00 p.m.25 views

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

6.1AI score0.0229EPSS
SaveExploits1References3
CVE
CVE
added 2017/08/24 9:00 p.m.45 views

CVE-2015-4699

The affected product is Cloud4Wi Splash Portal (before version 5.9.7). A Cross-Site Scripting (XSS) vulnerability exists in the Splash Portal that allows remote attackers to inject arbitrary web script or HTML by supplying malicious input to the recoveryMessage parameter in the default URI. This ...

6.1CVSS6AI score0.0229EPSS
SaveExploits1References3Affected Software1
Citrix
Citrix
added 2017/08/23 12:00 a.m.18 views

Citrix Provisioning Services imaging fails - Target Device Stuck at Windows splash screen

ESXi VM Hardware version 10 and 11 include a SATA controller for CD/DVD Media by default. If the SATA and SCSI controller are present on the PVS Target Device, the Master Target Device will fail to boot while creating vDisk & it will be stuck at windows splash screen...

7.1AI score
SaveExploits0
OSV
OSV
added 2017/01/06 9:59 p.m.12 views

DEBIAN-CVE-2016-4323

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image...

3.7CVSS6.3AI score0.02326EPSS
SaveExploits2References1
OSV
OSV
added 2016/06/23 12:00 a.m.13 views

UBUNTU-CVE-2016-4323

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image...

3.7CVSS6.7AI score0.02326EPSS
SaveExploits2References5
hackapp
hackapp
added 2016/04/01 10:21 a.m.11 views

Lipa Splash - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Lipa Splash published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
Rows per page
Query Builder