95 matches found
CVE-2022-31973
Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=deleteimg...
The vulnerability of the invertImage() function in the tiffcrop component of the LibTIFF library, related to writing beyond buffer boundaries, allows a malicious actor to trigger a service failure.
The vulnerability of the invertImage function in the tiffcrop component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2022-26645
A remote code execution RCE vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function...
PT-2022-17977
Name of the Vulnerable Software and Affected Versions Online Banking System Protect version 1.0 Description A remote code execution issue allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function. Recommendations For Online Banking System Protect...
Yzmcms 代码问题漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...
CVE-2021-39609
Cross Site Scripting XSS vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function...
CVE-2021-39609
Cross Site Scripting XSS vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function...
PT-2021-22675
Name of the Vulnerable Software and Affected Versions: FlatCore-CMS version 2.0.7 Description: A Cross Site Scripting XSS issue exists in the upload image function, allowing for potential exploitation. Recommendations: For FlatCore-CMS version 2.0.7, consider disabling the image upload function a...
ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS
A buffer overflow vulnerability in pprintimage in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...
CVE-2021-28203
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary...
CVE-2021-23352
This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...
SANE Backends Buffer Overflow Vulnerability
SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer overflow vulnerability exists in the 'esci2img' function in versions of SANE Backends prior to 1.0.30. An attacker could exploit...
The vulnerability of the DescribeImage function (magick/describe.c) in the cross-platform library for working with graphics in GraphicsMagick allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the DescribeImage function in the cross-platform graphics library GraphicsMagick is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...
exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...
PT-2019-5890 · Imagemagick +6 · Imagemagick +6
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNGImage function, which can allow a remote attacker to access confidential data and cause a denial of service. The problem is...
The vulnerability of the load_image function in the graphics library libcaca allows a hacker to execute arbitrary code.
The vulnerability of the loadimage function in the graphic library libcaca is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ImageMagick Denial of Service Vulnerability (CNVD-2018-26703)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WritePDBImage' function in the coders/pdb.c file in ImageMagick version...
XWiki cross-site scripting vulnerability (CNVD-2018-20220)
XWiki is an open source wiki and application platform written in Java and released under the LGPL. A cross-site scripting vulnerability exists in the 'image:' function in XWiki 10.7 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary payloads or scripts from...
DEBIAN-CVE-2017-18251
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file...