Lucene search
+L

804 matches found

OSV
OSV
added 2020/06/19 5:15 p.m.19 views

CVE-2018-21250

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

6.5CVSS6.9AI score0.0108EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/19 5:15 p.m.19 views

CVE-2018-21250

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

6.5CVSS0.0108EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/19 5:15 p.m.18 views

Code injection

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

4.3CVSS6.4AI score0.0108EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/19 4:51 p.m.31 views

CVE-2018-21250

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

6.4AI score0.0108EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/23 7:15 p.m.9 views

UBUNTU-CVE-2019-20788

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690...

9.8CVSS7.1AI score0.02436EPSS
SaveExploits1References3
OSV
OSV
added 2020/04/09 5:15 p.m.8 views

CVE-2020-1895

A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128...

7.8CVSS7.4AI score0.00858EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/09 4:20 p.m.26 views

CVE-2020-1895

A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128...

7.7AI score0.00858EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/03/23 8:49 a.m.9 views

libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function

A flaw was found in libvncserver in versions through 0.9.12. A large height or width value may cause an integer overflow or a heap-based buffer overflow. The highest threat from this vulnerability is to system availability...

9.8CVSS6.2AI score0.02436EPSS
SaveExploits1References4
OSV
OSV
added 2020/01/13 6:15 a.m.4 views

ALPINE-CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

7.5CVSS7.5AI score0.04973EPSS
SaveExploits1References1
OSV
OSV
added 2020/01/13 6:15 a.m.1 views

DEBIAN-CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

7.5CVSS7.5AI score0.04973EPSS
SaveExploits1References1
OSV
OSV
added 2020/01/13 6:15 a.m.14 views

UBUNTU-CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

7.5CVSS7.2AI score0.04973EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2020/01/13 5:2 a.m.59 views

CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

7.5CVSS8.5AI score0.04973EPSS
SaveExploits1
OSV
OSV
added 2019/07/29 7:15 p.m.8 views

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

6.5CVSS6.7AI score0.01367EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/29 7:15 p.m.23 views

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

6.5CVSS6.5AI score0.01367EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/07/09 12:0 a.m.30 views

EulerOS Virtualization for ARM 64 3.0.2.0 : python-pillow (EulerOS-SA-2019-1709)

According to the version of the python-pillow package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A vulnerability was found in python-pillow. A crafted image file with negative dimensions could cause a buffer to b...

7.8CVSS7.5AI score0.01881EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/23 5:29 a.m.4 views

DEBIAN-CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS7.2AI score0.02094EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/02/27 12:0 a.m.69 views

SUSE SLES12 Security Update : qemu (SUSE-SU-2019:0489-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493. CVE-2018-19489:...

7.8CVSS6.6AI score0.02959EPSS
SaveExploits0References21
OSV
OSV
added 2019/02/18 6:29 p.m.6 views

CVE-2019-8909

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service resource consumption via crafted dimensions for the verification code image...

7.5CVSS7.2AI score0.01811EPSS
SaveExploits1References1
Prion
Prion
added 2019/02/18 6:29 p.m.15 views

Code injection

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service resource consumption via crafted dimensions for the verification code image...

5CVSS7.5AI score0.01811EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2019/02/18 6:29 p.m.31 views

CVE-2019-8909

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service resource consumption via crafted dimensions for the verification code image...

7.5CVSS7.5AI score0.01811EPSS
SaveExploits1References1
Rows per page
Query Builder