Lucene search
+L

135 matches found

Prion
Prion
•added 2017/11/20 6:29 p.m.•25 views

Format string

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

5.8CVSS6.6AI score0.0135EPSS
SaveExploits0References1Affected Software2
OSV
OSV
•added 2017/11/20 6:29 p.m.•12 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS6.6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2017/11/20 6:00 p.m.•58 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

6.6AI score0.0135EPSS
SaveExploits0References1
Mend
Mend
•added 2017/11/20 6:00 p.m.•2 views

CVE-2017-16899

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the readtextobject functions in read.c and read13.c...

7.1CVSS0.0135EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/20 12:00 a.m.•4 views

PT-2017-14628

Name of the Vulnerable Software and Affected Versions Xfig version 3.2.6a Description The issue is related to an array index error in the fig2dev program, which can be exploited by remote attackers using a maliciously crafted Fig format file. This can lead to a denial-of-service attack or...

7.1CVSS0.0135EPSS
SaveExploits0References26
OSV
OSV
•added 2017/11/01 3:29 p.m.•19 views

CVE-2017-16352

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted...

8.8CVSS9.1AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2017/11/01 3:00 p.m.•52 views

CVE-2017-16352

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted...

7.5AI score0.14512EPSS
SaveExploits4References9
AlpineLinux
AlpineLinux
•added 2017/11/01 3:00 p.m.•80 views

CVE-2017-16352

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted...

8.8CVSS7.6AI score0.14512EPSS
SaveExploits4
NVD
NVD
•added 2017/09/17 9:29 p.m.•33 views

CVE-2017-14513

Directory traversal vulnerability in MetInfo 5.3.17 allows remote attackers to read information from any ini format file via the ffilename parameter in a fingerprintdo action to admin/app/physical/physical.php...

5.3CVSS5.2AI score0.01779EPSS
SaveExploits1References1
CVE
CVE
•added 2017/09/17 9:00 p.m.•65 views

CVE-2017-14513

MetInfo 5.3.17 contains a directory traversal vulnerability that lets remote attackers read arbitrary INI-format files via the f_filename parameter in a fingerprintdo action to admin/app/physical/physical.php. Exploitation could disclose sensitive data from the server. Affected software/component...

5.3CVSS6AI score0.01779EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2014/12/26 8:59 p.m.•6 views

DEBIAN-CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

7.5CVSS8.2AI score0.04335EPSS
SaveExploits0References1
myhack58
myhack58
•added 2012/09/13 12:00 a.m.•31 views

The hospital was built Station system arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

| Vulnerability file: upfile. aspx I first posted 9 8 line to 1 3 0 lines of code out ,look a bit funny! Google for: inurl:cms/Column. aspx? that inurl:cms/Column. aspx? LMID= too much,your own to find more keywords! | 0 1 | ---|--- 0 2 | function chkform ---|--- 0 3 | ---|--- 0 4 | ---|--- 0 5 |...

7.3AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/05/04 12:00 a.m.•110 views

rPSA-2007-0090-1 gimp

rPath Security Advisory: 2007-0090-1 Published: 2007-05-03 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: gimp=/conary.rpath.com@rpl:devel//1/2.2.8-8.3-1 References: https://vulners.com/cve/CVE-2007-2356...

6.8CVSS6.7AI score0.15674EPSS
SaveExploits3
Prion
Prion
•added 2006/05/12 8:06 p.m.•37 views

Buffer overflow

Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file...

5.1CVSS7.7AI score0.05161EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2003/03/24 5:00 a.m.•36 views

DEBIAN-CVE-2003-0130

The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image...

5CVSS6.9AI score0.10335EPSS
SaveExploits2References1
Rows per page
Query Builder