CVE-2019-14916

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...

CVE-2019-14916

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...

Unrestricted file upload

An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload...

CVE-2019-14916

CVE-2019-14916 affects PRiSE adAS 1.7.0. The issue is a failure to properly validate a file’s format, enabling an unrestricted file upload. The underlying cause is inadequate input/format checks during upload, leading to potential to place arbitrary files on the server and perform abuse as descri...

Binary Vulnerability in Exif Pilot

Exif Pilot is a free EXIF editor from Two Pilots. A binary vulnerability exists in Exif Pilot's handling of the TIFF format, which can be exploited by an attacker to cause the program to crash by constructing a malformed TIFF-formatted image...

libmysofa Out-of-Bounds Read Vulnerability

libmysofa is a library for reading AES SOFA files. An out-of-bounds read vulnerability exists in directblockRead in hdf/fractalhead.c in libmysofa 0.7. No details of the vulnerability are provided at this time...

Binary Vulnerability in Flying Pigeon Network Printing Component (CNVD-2019-33149)

Flying Pigeon is a LAN instant messaging software for enterprises, schools and families, realizing high-speed transmission of messages and files within LAN and printing on Flying Pigeon network. A binary vulnerability exists in the Flying Pigeon Network Printing component, which can be exploited ...

sox security update

CentOS Errata and Security Advisory CESA-2019:2283 An update for sox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Binary Vulnerability in Windshade Viewer FyPicViewer.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Cisco Webex Network Recording Player and Webex Player for Microsoft Windows Buffer Overflow Vulnerability

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows, which stems from the program's failure to...

Moderate: Red Hat Security Advisory: libmspack security update

An update for libmspack is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2019-0327

SAP NetWeaver for Java Application Server - Web Container, engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5, servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5, allows an attacker to upload files including script files without proper file format validation...

The vulnerability of the Windows Event Viewer component (eventvwr.msc) in the Windows operating system, which allows a malicious individual to read arbitrary files

The vulnerability of the Windows Event Viewer component eventvwr.msc in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to read arbitrary files using a specially created XML file...

UBUNTU-CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

UBUNTU-CVE-2019-12212

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...

UBUNTU-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop,...

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC Summary: Create more convenient Enhanced...