267 matches found
DEBIAN-CVE-2018-19565
A buffer over-read in cropmaskedpixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information...
PT-2018-2969
Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.6 Description The issue is related to a NULL pointer dereference in the crop page function. This occurs when the GetObject function is called on a pPage object that is NULL, specifically when pPage has a value of 0x0. The...
crop-s.co.jp XSS vulnerability
Open Bug Bounty ID: OBB-646240 Description| Value ---|--- Affected Website:| crop-s.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2018-15009
Name of the Vulnerable Software and Affected Versions dcraw versions through 9.28 Description A buffer over-read issue exists in the crop masked pixels function, which could allow attackers to crash an application or leak private information by supplying malicious files. Recommendations For...
imagemagick/crop_fuzzer: Index-out-of-bounds in LibRaw::linear_table
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5676335327346688 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...
imagemagick/crop_fuzzer: Use-of-uninitialized-value in PushColormapIndex
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5110343828242432 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
LibTIFF tools/tiffcrop.c out-of-bounds write buffer overflow vulnerability
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in libtiff version 4.0.6 in tools/tiffcrop.c, which can be...
jQuery Image Upload Vulnerability
jQuery is an American programmer John Resig developed a set of open source, cross-browser JavaScript library . There is a security vulnerability in jQuery. Since jQuery's jqueryuploadcrop fails to restrict the format of uploaded images, an attacker can exploit this vulnerability to upload specifi...
DEBIAN-CVE-2016-6128
The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...
ALPINE-CVE-2016-6128
The gdImageCropThreshold function in gdcrop.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service application crash via an invalid color index...
Drupal EPSA Crop - Image Cropping Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal EPSA Crop - Image Cropping, which allows remote attackers to exploit the vulnerability to inject malicious script or...
Insta No Crop Efeitos SnapChat - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Insta No Crop Efeitos SnapChat published at the 'play' market has multiple vulnerabilities...
Square Blur: No crop insta pic - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Square Blur: No crop insta pic published at the 'play' market has multiple vulnerabilities...
Insta Square Maker -No Crop HD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Insta Square Maker -No Crop HD published at the 'play' market has multiple vulnerabilities...
Square Quick Pro-No Crop Photo - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Square Quick Pro-No Crop Photo published at the 'play' market has multiple vulnerabilities...
Insta Square Size - No Crop - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Insta Square Size - No Crop published at the 'play' market has multiple vulnerabilities...
WordPress Manual Image Crop Plugin <= 1.10 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...
WordPress Manual Image Crop Plugin <= 1.10 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...
PT-2016-3557
Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description A use-after-free issue in the msm set crop function in the MSM-Camera driver allows attackers to gain privileges or cause a denial of service through memory corruption. This can be achieved by making a...
iManager Plugin 1.2.8 (d) - Remote Arbitrary File Deletion Vulnerability
No description provided by source. iManager Plugin v1.2.8 d Remote Arbitrary File Deletion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your webserver, and it...