Lucene search
+L

825 matches found

CVE
CVE
added 2015/01/13 11:0 a.m.45 views

CVE-2014-10005

CVE-2014-10005 affects Maian Uploader 4.0. The issue arises when requesting load_flv.js.php without the required height parameter, which may cause an error message that reveals the installation path. This is a potential information disclosure in the affected component (load_flv.js.php). The docum...

5CVSS6.3AI score0.01842EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2014/12/31 12:0 a.m.6 views

UBUNTU-CVE-2014-9766

Integer overflow in the createbits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via large height and stride values...

9.8CVSS7.7AI score0.05573EPSS
SaveExploits0References4
OSV
OSV
added 2014/11/05 11:55 a.m.2 views

DEBIAN-CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted GIF data...

7.5CVSS7.2AI score0.03058EPSS
SaveExploits0References1
OSV
OSV
added 2014/11/05 11:55 a.m.4 views

DEBIAN-CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

7.5CVSS7.5AI score0.03076EPSS
SaveExploits0References1
NVD
NVD
added 2014/11/05 11:55 a.m.13 views

CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

7.5CVSS7.2AI score0.03076EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2014/11/05 11:0 a.m.41 views

CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

7.5CVSS7.2AI score0.03076EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2014/11/05 11:0 a.m.43 views

CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted GIF data...

7.5CVSS7.2AI score0.03058EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2014/11/05 12:0 a.m.29 views

CVE-2014-8547

libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted GIF data...

7.5CVSS6AI score0.03058EPSS
SaveExploits0References4
OSV
OSV
added 2014/11/05 12:0 a.m.5 views

UBUNTU-CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

7.5CVSS5.9AI score0.03076EPSS
SaveExploits0References4
NVD
NVD
added 2014/07/02 6:55 p.m.18 views

CVE-2014-4543

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...

4.3CVSS5.9AI score0.01618EPSS
SaveExploits1References2
NVD
NVD
added 2014/07/02 6:55 p.m.17 views

CVE-2014-4574

Cross-site scripting XSS vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter...

4.3CVSS5.8AI score0.02046EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2014/07/02 6:0 p.m.24 views

CVE-2014-4574

Cross-site scripting XSS vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter...

5.8AI score0.02046EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Pargoon CMS all version - DoS Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Pargoon Vendor: http://www.vestasoft.ir Vulnerability Info: Type: DOS Risk: Medium 2010-01-17 - Found Vulnerability 2010-01-19 - Vendor notified 2010-05-08 - Public disclosure Vulnerability:...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2014/06/23 12:0 a.m.21 views

WordPress WebEngage Plugin <= 2.0.0 - XSS

Because of this vulnerability in resize.php, the attackers to inject arbitrary web script or HTML via the "height" parameter or renderer.php or callback.php. Solution Update the plugin...

4.3CVSS2.7AI score0.02046EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2014/05/08 2:0 p.m.80 views

CVE-2014-0190

Removed by vendor...

4.3CVSS7AI score0.03957EPSS
SaveExploits0
OSV
OSV
added 2014/05/08 12:0 a.m.5 views

UBUNTU-CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

4.3CVSS6.8AI score0.03957EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2014/02/27 6:33 p.m.17 views

(gif2tiff): possible heap-based buffer overflow in readgifimage()

Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted height and width values in a GIF image...

6.8CVSS8AI score0.07165EPSS
SaveExploits0References4
OSV
OSV
added 2013/12/09 4:36 p.m.4 views

DEBIAN-CVE-2013-7015

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

6.8CVSS7.6AI score0.02565EPSS
SaveExploits1References1
NVD
NVD
added 2013/12/07 9:55 p.m.23 views

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6.6AI score0.03118EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2013/12/07 9:55 p.m.32 views

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6AI score0.03118EPSS
SaveExploits0References2
Rows per page
Query Builder