CVE-2020-9008: Improper Neutralization of Input During Web Page Generation

Stored Cross-site scripting XSS vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor...

UBUNTU-CVE-2019-20160

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...

GPAC buffer overflow vulnerability (CNVD-2020-00232)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in the 'av1parsetilegroup' function in the mediatools/avparsers.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from a networked system or product performing operations in memory...

PT-2019-16105

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A stack-based buffer overflow issue exists in the av1 parse tile group function, located in media tools/av parsers.c. Recommendations For GPAC version 0.8.0, consider applying ...

WordPress alpine-photo-tile-for-instagram plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. alpine-photo-tile-for-instagram is a plugin used in it to retrieve photos or hashtags of specific Instagram users. A...

Cross site request forgery (csrf)

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...

CVE-2015-9432

The vulnerability CVE-2015-9432 affects the WordPress plugin alpine-photo-tile-for-instagram, specifically versions prior to 1.2.7.6. It enables a cross-site scripting (XSS) condition that can result from a CSRF flaw via the plugin’s settings page (wp-admin/options-general.php?page=alpine-photo-t...

CVE-2015-9432: Cross-Site Request Forgery (CSRF)

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...

PT-2019-6454

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a memory leak in the filter frame function of the vf tile.c component in the FFmpeg multimedia library. This is due to incorrect memory deallocation before removing the last reference...

Buffer Overflow

libtiff is vulnerable to buffer overflow attacks. This occurs when dealing with unusual tile size like YCbCr with subsampling which may leads to the assertion failures in debug mode or buffer overflows in release mode causing the application to crash...

UBUNTU-CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

DEBIAN-CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

PT-2019-18401

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0 Description An issue in OpenJPEG allows remote attackers to cause a denial of service through attempted excessive memory allocation. This occurs in the opj calloc function in openjp2/opj malloc.c when called from opj tcd...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

Artifex MuPDF Infinite Loop Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the 'svgdevendtile' function in the fitz/svg-device.c file in Artifex MuPDF version 1.14.0. An attacker can exploit the vulnerability to cause an infinite loop...

PT-2018-15091 · Artifex · Artifex Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue is related to an infinite loop in the svg dev end tile function, located in the fitz/svg-device.c file. This was demonstrated using the mutool utility. Recommendations: For Artifex MuPDF...

tile-magazine.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-653959 Description| Value ---|--- Affected Website:| tile-magazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

LibTIFF Buffer Overflow Vulnerability (CNVD-2018-14920)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A buffer overflow vulnerability exists in TIFFWriteBufferSetup in tifwrite.c in LibTIFF 4.0.9. An attacker can exploit this vulnerability to cause a denial of service via TIFFWriteTile...

UBUNTU-CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...