Lucene search
+L

177 matches found

Cvelist
Cvelist
added 2023/12/04 3:45 a.m.38 views

CVE-2023-32855

In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07909204; Issue ID: ALPS07909204...

6.9AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/30 12:15 p.m.32 views

CVE-2023-47850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...

6.5CVSS0.00385EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2023/10/24 5:23 p.m.11 views

cv-stuttgart.de Improper Access Control vulnerability OBB-3764923

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
SaveExploits0
OSV
OSV
added 2023/05/31 2:02 p.m.14 views

OSV-2023-444 Heap-buffer-overflow in opj_jp2_apply_pclr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59450 Crash type: Heap-buffer-overflow READ 4 Crash state: opjjp2applypclr opjjp2decode cv::detail::Jpeg2KOpjDecoderBase::readData...

7.2AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.9 views

SUSE CVE-2017-12605

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread...

8.8CVSS7.2AI score0.01986EPSS
SaveExploits0References4
NVD
NVD
added 2023/01/02 8:15 a.m.23 views

CVE-2014-125033

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploadedfilescontroller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been...

7.5CVSS5AI score0.00872EPSS
SaveExploits0References3
Prion
Prion
added 2023/01/02 8:15 a.m.24 views

Path traversal

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploadedfilescontroller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been...

2.7CVSS7AI score0.00872EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/02 7:51 a.m.28 views

CVE-2014-125033 rails-cv-app uploaded_files_controller.rb path traversal

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploadedfilescontroller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been...

3.5CVSS7.6AI score0.00872EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/02 7:51 a.m.60 views

CVE-2014-125033

The CVE-2014-125033 issue affects rails-cv-app, specifically the uploaded_files_controller.rb functionality. It enables path traversal through input like ../../../etc/passwd, resulting in access to ../filedir. Public disclosure of the exploit has occurred. A fix is identified by patch hash 0d2036...

7.5CVSS5.6AI score0.00872EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/01/02 12:00 a.m.9 views

Rails CV App 路径遍历漏洞

Rails CV App is a Rails application by the individual developer Bertrand Caron. A path traversal vulnerability exists in Rails CV App. An attacker can exploit this vulnerability to obtain sensitive information in the path folder...

7.5CVSS5.6AI score0.00872EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2022/12/15 1:00 p.m.18 views

cv.ca Cross Site Scripting vulnerability OBB-3102586

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:00 a.m.17 views

The vulnerability of the `cv::HOGDescriptor::getDescriptorSize` function in the Open Source Computer Vision Library (OpenCV) software library, which is used for computer vision, image processing, and numerical algorithms in general-purpose applications, allows a attacker to cause a service failure.

The vulnerability of the cv::HOGDescriptor::getDescriptorSize function in the Open Source Computer Vision Library OpenCV software library for computer vision, image processing, and general numerical algorithms is related to the lack of checks for division by zero. Exploiting this vulnerability...

7.1CVSS6.5AI score0.0237EPSS
SaveExploits1References9Affected Software4
Openbugbounty
Openbugbounty
added 2022/06/27 3:51 a.m.13 views

cv-total.de Cross Site Scripting vulnerability OBB-2685150

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/05/17 6:39 a.m.16 views

new packages: hunspell-cv

An update is available for hunspell-cv. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
OSV
OSV
added 2022/05/04 12:00 a.m.31 views

OSV-2022-394 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...

7.2AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2021/10/12 10:23 p.m.41 views

Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

5.5CVSS3.1AI score0.01519EPSS
SaveExploits1References8Affected Software2
Github Security Blog
Github Security Blog
added 2021/10/12 10:02 p.m.33 views

Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread...

8.8CVSS2.5AI score0.01986EPSS
SaveExploits0References8Affected Software2
OSV
OSV
added 2021/10/12 10:01 p.m.36 views

GHSA-C7GP-2PCH-QH2V Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread...

8.8CVSS8.6AI score0.01986EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2021/10/12 10:00 p.m.34 views

Out-of-bounds Read in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the...

8.8CVSS1.8AI score0.01986EPSS
SaveExploits0References10Affected Software2
Debian CVE
Debian CVE
added 2020/12/17 6:43 p.m.45 views

CVE-2020-35491

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS8.1AI score0.0959EPSS
SaveExploits1
Rows per page
Query Builder