Lucene search
+L

280 matches found

BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•12 views

The vulnerability of the ReadCUTImage function in the console-based image editing tool ImageMagick, related to the use of uninitialized resources, allows attackers to access confidential information or cause service failures.

The vulnerability of the ReadCUTImage function in the console-based ImageMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

8.8CVSS6.8AI score0.03276EPSS
SaveExploits0References16Affected Software5
RedHat Linux
RedHat Linux
•added 2020/03/31 8:15 p.m.•15 views

ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write...

6.5CVSS5.9AI score0.03037EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/03/31 8:15 p.m.•11 views

ImageMagick: a "use of uninitialized value" vulnerability in the function ReadCUTImage leading to a crash and DoS

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS5.8AI score0.03276EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/03/26 12:00 a.m.•22 views

Unspecified Vulnerability in Apple iOS and iPadOS Mail Attachments Component

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in the Mail Attachments component of Apple iOS prior to 13.4 and iPadOS prior ...

5.3CVSS6.5AI score0.00802EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2020/02/24 9:49 p.m.•80 views

Apple Takes Heat Over 'Vulnerable' iOS Cut-and-Paste Data

Any cut-and-paste data temporarily stored to an iPhone or iPad’s memory can be accessed by all apps installed on the specific device – even malicious ones. That data can then reveal private information such as a user’s GPS coordinates, passwords, banking data or a spreadsheet copied into an email...

6AI score
SaveExploits0References5
OSV
OSV
•added 2020/01/23 8:15 p.m.•14 views

DEBIAN-CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS7AI score0.0361EPSS
SaveExploits1References1
osv-ubuntu
osv-ubuntu
•added 2019/10/29 7:15 p.m.•12 views

UBUNTU-CVE-2019-15678

TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity...

9.8CVSS7.5AI score0.12805EPSS
SaveExploits0References3
OSV
OSV
•added 2019/07/01 8:15 p.m.•14 views

ALPINE-CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS6.9AI score0.03276EPSS
SaveExploits0References1
OSV
OSV
•added 2019/07/01 8:15 p.m.•8 views

UBUNTU-CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS6.8AI score0.03276EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2019/07/01 8:15 p.m.•14 views

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS5.5AI score0.03276EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
•added 2019/05/06 12:00 a.m.•29 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

4.3CVSS5.7AI score
SaveExploits0Affected Software1
Hacker One
Hacker One
•added 2019/02/25 8:14 p.m.•71 views

Monero: Zero-amount miner TX + RingCT allows monero wallet to receive arbitrary amount of monero

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: By mining a...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/12/20 12:00 a.m.•5 views

PT-2018-2745

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the "Центр управления безопасностью" component. This could allow a remote attacker to execu...

4CVSS6.5AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2018/11/16 11:22 a.m.•2 views

Secret Charges Against Julian Assange Revealed Due to "Cut-Paste" Error

Has Wikileaks founder Julian Assange officially been charged with any unspecified criminal offense in the United States? — YES United States prosecutors have accidentally revealed the existence of criminal charges against Wikileaks founder Julian Assange in a recently unsealed court filing in an...

6.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2018/11/16 11:22 a.m.•420 views

Secret Charges Against Julian Assange Revealed Due to "Cut-Paste" Error

Has Wikileaks founder Julian Assange officially been charged with any unspecified criminal offense in the United States? — YES United States prosecutors have accidentally revealed the existence of criminal charges against Wikileaks founder Julian Assange in a recently unsealed court filing in an...

6.8AI score
SaveExploits0
Mend
Mend
•added 2018/11/05 2:00 p.m.•8 views

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

9.8CVSS0.02668EPSS
SaveExploits1References1
CVE
CVE
•added 2018/11/05 2:00 p.m.•62 views

CVE-2018-9208

The CVE-2018-9208 entry corresponds to an Unaithenticated arbitrary file upload vulnerability in the jQuery Picture Cut component (<= v1.1Beta). Connected sources consistently describe that an unauthenticated user can upload arbitrary files via the vulnerable upload path (e.g., upload.php), en...

9.8CVSS9.5AI score0.02668EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/11/05 2:00 p.m.•33 views

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

9.6AI score0.02668EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/05 1:29 p.m.•24 views

Design/Logic Flaw

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

7.5CVSS9.4AI score0.02668EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/11/05 1:29 p.m.•22 views

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

9.8CVSS9.6AI score0.02668EPSS
SaveExploits1References1
Rows per page
Query Builder