Code injection

The Password Manager Extension in Abine Blur 7.8.242 before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured...

CVE-2018-7213

The CVE concerns Abine Blur’s Password Manager Extension. Affected: Blur 7.8.242* pre-release 7.8.2428. Root cause: an unsecured right-click context menu allows bypass of Multi-Factor Authentication and macOS disk encryption protection, enabling exfiltration of secured data. Documents do not spec...

CVE-2018-7213

The Password Manager Extension in Abine Blur 7.8.242 before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured...

Fedora 24 : mingw-librsvg2 (2017-0b8c45ebf7)

MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 division-by-zero in the Gaussian blur code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format ...

MGASA-2017-0247 Updated librsvg packages fix security vulnerability

Division-by-zero in the Gaussian blur code CVE-2017-11464...

Updated librsvg packages fix security vulnerability

Division-by-zero in the Gaussian blur code CVE-2017-11464...

Fedora 25 : librsvg2 (2017-cf1a42722d)

librsvg 2.40.18 release, fixing CVE-2017-11464 division-by-zero in the Gaussian blur code. For details, see https://mail.gnome.org/archives/ftp-release-list/2017-July/msg00078.ht ml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

GNOME librsvg 'rsvg-filter.c' denial of service vulnerability

GNOME librsvg is an open source SVG graphics development library for the GNOME project. A security vulnerability exists in the 'boxblurline' function of the rsvg-filter.c file in GNOME librsvg version 2.40.17. An attacker can exploit the vulnerability to cause a denial of service condition...

UBUNTU-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

DEBIAN-CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

Fedora 26 : php-horde-Horde-Image (2017-28387b61fd)

HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. ---- HordeImage 2.5.0 - mjr SECURITY: Prevent DOS attack by preventing an infinite loop in certain conditions CVE-2017-9773, reported by Fariskhi Vidyan. - mjr SECURITY: Prevent RCE attacks by properly sanitizing...

Fedora 25 : php-horde-Horde-Image (2017-6f7d6fbccc)

HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. ---- HordeImage 2.5.0 - mjr SECURITY: Prevent DOS attack by preventing an infinite loop in certain conditions CVE-2017-9773, reported by Fariskhi Vidyan. - mjr SECURITY: Prevent RCE attacks by properly sanitizing...

ALPINE-CVE-2016-7970

Buffer overflow in the calccoeff function in libass/assblur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors...

MGASA-2016-0341 Updated libass packages fixes security vulnerabilities

Amount of memory allocated during memory reallocation in the shaper wasn't tracked, possibly resulting in undefined behavior CVE-2016-7972. Illegal read in Gaussian blur coefficient calculations CVE-2016-7970. Mode 0/3 line wrapping equalization in specific cases could result in illegal reads whi...

Updated libass packages fixes security vulnerabilities

Amount of memory allocated during memory reallocation in the shaper wasn't tracked, possibly resulting in undefined behavior CVE-2016-7972. Illegal read in Gaussian blur coefficient calculations CVE-2016-7970. Mode 0/3 line wrapping equalization in specific cases could result in illegal reads whi...

Moto Blur style Atrix Clock - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Moto Blur style Atrix Clock published at the 'play' market has multiple vulnerabilities...

Square Blur: No crop insta pic - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Square Blur: No crop insta pic published at the 'play' market has multiple vulnerabilities...

Point Blur (Partial blur) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Point Blur Partial blur published at the 'play' market has multiple vulnerabilities...

CVE-2013-6625

Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require chil...

Design/Logic Flaw

Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require chil...