3742 matches found
BEESCMS 代码问题漏洞
BEESCMS is a template program completely separated, using PHP MYSQL technology development, with powerful SEO features, simple operation of the self-service building system. BEESCMS version 4.0 /admin/upload.php in the arbitrary file upload vulnerability. The vulnerability can be exploited by...
VulnCheck KEV: CVE-2016-3718
ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery SSRF via a crafted image...
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery SSRF via a crafted image...
Image-Processing Resource Management Error Vulnerability
Image-Processing is an image processing code repository that uses C. abhijitnathwani image-processing v0.1.0 contains a security vulnerability that stems from a problem with how the software handles image file sizes, which could be exploited by an attacker to cause a denial of service via a craft...
CVE-2020-21573
An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...
CVE-2020-21573
An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...
Image-Processing资源管理错误漏洞
Image-Processing is an image processing code repository that uses C. abhijitnathwani image-processing v0.1.0 contains a security vulnerability that stems from a problem with how the software handles image file sizes, which could be exploited by an attacker to cause a denial of service via a craft...
The vulnerability of the WaveImage() function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure due to insufficient checking of division by zero.
The vulnerability of the WaveImage function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a...
EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2021-2628)
According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an informati...
CVE-2021-38847
S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file...
S-cart 代码问题漏洞
S-cart, a Php-based e-commerce management platform from the S-cart community, is vulnerable in S-Cart v6.4.1 and below, which can be exploited by attackers to execute arbitrary code via a crafted IMG file...
The vulnerability of the Exiv2 metadata management library, related to the execution of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory due to errors in metadata writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...
Denial Of Service (DoS)
udisks2 is vulnerable to denial of service. The vulnerability exists because some user-accessible mount helpers use insecure defaults which allows an attacker to send a crafted image causing an application crash...
The vulnerability of the WriteTHUMBNAILImage function in the coders/thumbnail.c component of the console image editing tool ImageMagick, related to integer overflow, allows a attacker to cause a service failure.
The vulnerability of the WriteTHUMBNAILImage function in the coders/thumbnail.c file of the console image editing tool ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created image file...
UBUNTU-CVE-2021-28021
Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file...
GHSA-9G8H-PJM4-Q92P Out-of-bounds Write in OpenCV.
In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...
Out-of-bounds Write in OpenCV.
In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...
Apple iTunes < 12.12 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.12. It is, therefore, affected by multiple vulnerabilities as referenced in the HT212817 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2021-30835, CVE-2021-30847 -...
ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()
The ntfs3g package is susceptible to an input validation flaw. A crafted NTFS image with invalid values could trigger an improper check. This incorrect check causes an integer overflow which then leads to a heap overflow. The highest threat from this vulnerability is to confidentiality, integrity...
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2495)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialize...