76 matches found
Missing permission check in cloud-stats
cloud-stats 0.26 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages. cloud-stats 0.27 requires Overall/Administer permission to access...
exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp
In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort...
exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file
The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...
exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
CloudBees Jenkins Mantis Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site request forgery vulnerability exists in CloudBees Jenkins Mantis Plugin version 0.26 and earlier. The vulnerability stems from a WEB application that...
exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...
exiv2: heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...
PyXDG Code Injection Vulnerability
PyXDG is a python library that accesses the freedesktop.org standard. A code injection vulnerability exists in PyXDG versions prior to 0.26, which can be exploited by an attacker to generate an illegal code segment that modifies the intended execution control flow of a networked system or compone...
PYSEC-2018-141
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...
Exiv2 Buffer Overflow Vulnerability (CNVD-2018-20550)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...
PYSEC-2018-138
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
Exiv2 heap buffer overflow vulnerability (CNVD-2018-19608)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A heap buffer overflow vulnerability exists in the...
Exiv2 heap buffer overflow vulnerability (CNVD-2018-19609)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A heap buffer overflow vulnerability exists in the...
UBUNTU-CVE-2018-16336
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file, a different vulnerability than CVE-2018-10999...
Exiv2 Buffer Overflow Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in the...
CloudBees Jenkins AWS CodeBuild Plugin Information Disclosure Vulnerability
CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks.AWS CodeBuild Plugin is used in one of the test projec...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
DEBIAN-CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
Exiv2 Buffer Overflow Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in the getData of the...