29 matches found
ALSA-2026:2799 Moderate: php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 For more details about the...
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter...
[SECURITY] Fedora 31 Update: libexif-0.6.22-1.fc31
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
Moderate: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter...
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter...
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter...
CVE-2020-9468
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the imageid parameter...
CVE-2019-5210: Improper Validation of Array Index
Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190C00E190R6P2and Versions earlier than 9.1.1.175C00E170R3P2 have an improper validation of array index vulnerability. The system does not properly validate the input value before use it as an array index when processing certain...
[SECURITY] Fedora 26 Update: libexif-0.6.21-14.fc26
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
jasper: missing jas_matrix_create() parameter checks
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690...
UBUNTU-CVE-2016-8884
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690...
UBUNTU-CVE-2016-8691
The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...
perl-Image-Info XML External Entity Injection Vulnerability
perl-Image-Info extracts meta information from various types of image files. perl-Image-Info suffers from an XML external entity injection vulnerability that can be exploited by attackers to obtain sensitive information or cause a denial of service condition...
CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...
CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...
CVE-2015-5788
The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...
CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...
PT-2015-1661
Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 Description The issue is related to the improper handling of cached image information, which could allow a remote attacker to obtain sensitive browsing-history information. This could be used to gain...
