CVE-2021-32962

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code...

Path traversal

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system...

Cross site scripting

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-32962

CVE-2021-32962 affects AGG Software Web Server (webserver.dll) versions 4.0.40.1014 and earlier. The vulnerability is a cross-site scripting flaw that, per sources, may allow an attacker to remotely execute arbitrary code. The ICS advisory confirms affected products and notes risk of remote code ...

CVE-2021-32962 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-32964 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system...

CVE-2021-32964 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system...

CVE-2021-32964

The CVE-2021-32964 issue affects AGG Software Web Server versions 4.0.40.1014 and earlier, enabling a path traversal vulnerability that may allow an attacker to read arbitrary files from the file system. Public sources confirm the affected product and vulnerability class (path traversal, CWE-23),...

PT-2022-10165 · Agg · Agg Software Web Server

Name of the Vulnerable Software and Affected Versions: AGG Software Web Server versions 4.0.40.1014 and prior Description: The issue allows an attacker to perform a path traversal attack, potentially enabling them to read arbitrary files from the file system. Recommendations: For AGG Software Web...

Debian: Security Advisory (DLA-2872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2872-1] agg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2872-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 31, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2872-1 : agg - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2872 advisory. Stack overflow due to infinite recursion was fixed in agg, the Anti-Grain Geometry graphical toolkit. For Debian 9 stretch, this problem has been fixed in version...

AGG Software Web Server 路径遍历漏洞

Web Server is a simple but fast and robust web server from AGG Software. A security vulnerability exists in AGG Software Web Server that stems from the vulnerability of the affected product to a path traversal attack, where an attacker may be able to read arbitrary files from the file system...

AGG Software Web Server Plugin

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: AGG Software Equipment: Web Server Vulnerabilities: Path Traversal, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow remote code execution and...

ALPINE-CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

Exploit for SQL Injection in Djangoproject Django

CVE-2020-7471 This repository provides environments and POC...

DEBIAN-CVE-2020-7471

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter. By passing a suitably crafted delimiter...

Debian DLA-1656-1 : agg security update

A stack overflow vulnerability was discovered in AGG, the AntiGrain Geometry graphical toolkit, that may lead to code execution if a malformed file is processed. Since AGG only provides a static library, the desmume and exactimage packages were rebuilt against the latest security update. For Debi...

[SECURITY] [DLA 1656-1] agg security update

Package : agg Version : 2.5+dfsg1-9+deb8u1 CVE ID : CVE-2019-6245 Debian Bug : 919322 A stack overflow vulnerability was discovered in AGG, the AntiGrain Geometry graphical toolkit, that may lead to code execution if a malformed file is processed. Since AGG only provides a static library, the...

CVE-2019-6245

An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. In the function agg::cellaa::notequal, dx is assigned to x2 - x1. If dx = dxlimit, which is 16384 polysubpixelshift, this function will call itself recursively. There can be a situation where x2 - x1 is alway...