Lucene search
+L

2930 matches found

CNVD
CNVD
•added 2020/12/15 12:00 a.m.•61 views

ImageMagick memory leak vulnerability (CNVD-2021-23803)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A memory leak vulnerability exists in the MIFF coder in versions of ImageMagick prior...

5.5CVSS7.2AI score0.00862EPSS
SaveExploits1References1
osv-debian
osv-debian
•added 2020/12/08 10:15 p.m.•5 views

DEBIAN-CVE-2020-27755

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

3.3CVSS6.5AI score0.00862EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2020/12/08 10:15 p.m.•39 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6.3AI score
SaveExploits0References1
osv-cve
osv-cve
•added 2020/12/08 10:15 p.m.•37 views

CVE-2020-27755

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

3.3CVSS6.4AI score
SaveExploits0References1
osv-debian
osv-debian
•added 2020/12/08 10:15 p.m.•7 views

DEBIAN-CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6.7AI score0.00862EPSS
SaveExploits1References1
osv-ubuntu
osv-ubuntu
•added 2020/12/08 10:15 p.m.•13 views

UBUNTU-CVE-2020-27755

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

3.3CVSS6.8AI score0.00862EPSS
SaveExploits1References4
osv-ubuntu
osv-ubuntu
•added 2020/12/08 10:15 p.m.•16 views

UBUNTU-CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6.8AI score0.00862EPSS
SaveExploits1References5
Prion
Prion
•added 2020/12/08 10:15 p.m.•27 views

Input validation

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

4.3CVSS5.2AI score0.00862EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2020/12/08 10:15 p.m.•29 views

Code injection

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

4.3CVSS3.9AI score0.00862EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/08 9:57 p.m.•52 views

CVE-2020-27755

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

5.1AI score0.00862EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2020/12/08 9:57 p.m.•84 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6AI score0.00862EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/12/08 9:57 p.m.•55 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

6AI score0.00862EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•22 views

ImageMagick Studio ImageMagick 代码问题漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A memory leak vulnerability exists in versions of ImageMagick prior to 7.0.9-0. The...

4.3CVSS6.8AI score0.00862EPSS
SaveExploits1References6
Veracode
Veracode
•added 2020/12/06 4:00 a.m.•38 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. Memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values allow an attacker to crash the application...

5.5CVSS4.2AI score0.00862EPSS
SaveExploits1References2Affected Software4
CNVD
CNVD
•added 2020/11/25 12:00 a.m.•9 views

SQL Injection Vulnerability in the Website of Beijing Depth Space Decoration Engineering Co.

Beijing Depth Space Decoration Group, founded in 2003, is a member unit of China Building Decoration Association. The website of the branch of Beijing Depth Space Decoration Engineering Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive...

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/11/24 7:23 p.m.•52 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS2.8AI score0.00862EPSS
SaveExploits1References3
ICS
ICS
•added 2020/11/24 12:00 a.m.•64 views

Fuji Electric V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: V-Server Lite Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for remote code execution on the device. 3. TECHNICAL DETAILS 3.1...

7.8CVSS8AI score0.01151EPSS
SaveExploits0References5
ICS
ICS
•added 2020/11/10 12:00 a.m.•89 views

ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...

9.3CVSS9AI score0.28084EPSS
SaveExploits1References2
NVD
NVD
•added 2020/11/05 8:15 p.m.•24 views

CVE-2020-24439

Acrobat Reader DC for macOS versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been implemented to further harden the Adobe Reader upda...

2.8CVSS2.6AI score0.00638EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/05 7:32 p.m.•34 views

CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass

Acrobat Reader DC for macOS versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been implemented to further harden the Adobe Reader upda...

2.8CVSS4.2AI score0.00638EPSS
SaveExploits0References1
Rows per page
Query Builder