phpmailer -- XSS in code example and default exeception handler

PHPMailer reports: Fix XSS vulnerability in one of the code examples, CVE-2017-11503. The codegenerator.phps example did not filter user input prior to output. This file is distributed with a .phps extension, so it it not normally executable unless it is explicitly renamed, so it is safe by...

USN-3366-1: OpenJDK 8 vulnerabilities

It was discovered that the JPEGImageReader class in OpenJDK would incorrectly read unused image data. An attacker could use this to specially construct a jpeg image file that when opened by a Java application would cause a denial of service. CVE-2017-10053 It was discovered that the JAR verifier ...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

XSS vulnerability in code example

SECURITY Fix XSS vulnerability in one of the code examples, CVE-2017-11503. The codegenerator.phps example did not filter user input prior to output. This file is distributed with a .phps extension, so it it not normally executable unless it is explicitly renamed, so it is safe by default. There...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

Code injection

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

CVE-2017-11640

CVE-2017-11640 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

Red Hat Candlepin Information Disclosure Vulnerability

Red Hat Candlepin is the United States Red Hat Red Hat company's set of open source using the Java language written in open source software for managing software subscriptions. A security vulnerability exists in Red Hat Candlepin. A remote attacker could exploit this vulnerability to obtain Java...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

CVE-2015-5187

Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic...

CVE-2015-5187

CVE-2015-5187 pertains to Red Hat Candlepin, where excessive web traffic allows remote attackers to obtain Java exception statements and thus sensitive information. Affected software is Candlepin (Java-based); the root cause is information disclosure via exception details exposed in responses und...

Yii Framework Cross-Site Scripting Vulnerability (CNVD-2017-25538)

Yii Framework is the Yii team developed a set of component-based , high-performance PHP framework for developing large-scale Web applications . Yii Framework 2.0.12 version of the framework/views/errorHandler/exception.php file has a cross-site scripting vulnerability , the vulnerability stems fr...

PYSEC-2017-124

There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11591

There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

Denial Of Service (DoS) Through Floating Point Exception (FPE)

ImageMagick is vulnerable to denial of service DoS attacks. A flaw in the WritePALMImage function can lead to a Floating Point Exception FPE when processing a file in convert, leading to the application crashing...

CVE-2017-11591

CVE-2017-11591 is described as a Floating point exception in Exiv2::ValueType in Exiv2 0.26 that can cause a remote denial of service via crafted input. The connected documents corroborate the issue across distributions (e.g., Astra Linux, Ubuntu USN-3852-1, Debian DLA-3265) and list Exiv2 as the...

Exiv2 'Exiv2::ValueType' Function Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the 'Exiv2::ValueType'...