Lucene search
+L

2403 matches found

OpenVAS
OpenVAS
added 2021/01/21 12:0 a.m.29 views

Fedora: Security Advisory for python-pillow (FEDORA-2021-a8ddc1ce70)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3AI score
SaveExploits0References2
CNVD
CNVD
added 2021/01/14 12:0 a.m.27 views

Pillow Buffer Overflow Vulnerability (CNVD-2021-54038)

Pillow is a Python-based image processing library. buffer overflow vulnerability exists in versions of Pillow prior to 8.1.0, which can be exploited by attackers to cause a buffer over read...

7.1CVSS5.5AI score0.01498EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/24 12:0 a.m.4 views

Magical Image Converter and Processor (Windows Edition) Denial of Service Vulnerability

Magic Image Processing Software is a professional, easy-to-use and efficient image processing software toolset developed by Beijing Magic Pixel Technology Co. A denial of service vulnerability exists in Miracle Image Converter windows version, which can be exploited by attackers to cause a softwa...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/12/23 12:0 a.m.34 views

ImageMagick Input Validation Error Vulnerability (CNVD-2021-11327)

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...

4.3CVSS7.5AI score0.01124EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.11 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.6 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS6.7AI score0.0369EPSS
SaveExploits0References14Affected Software6
Apple
Apple
added 2020/12/15 6:2 a.m.73 views

About the security content of iCloud for Windows 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.7AI score0.05961EPSS
SaveExploits9Affected Software1
CNVD
CNVD
added 2020/12/15 12:0 a.m.11 views

ImageMagick Code Issue Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS5.9AI score0.01016EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.44 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-23801)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions of ImageMagick prior to 7.0.9-0, which...

5.5CVSS6.4AI score0.00833EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.10 views

Imagemagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2021-25968)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A resource management error vulnerability exists in versions of ImageMagick prior to...

5.5CVSS7AI score0.01101EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2020/12/14 1:36 p.m.7 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/12/14 11:50 a.m.8 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/12/14 11:36 a.m.7 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
Apple
Apple
added 2020/12/14 12:0 a.m.166 views

About the security content of tvOS 14.3

About the security content of tvOS 14.3 This document describes the security content of tvOS 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.6AI score0.01725EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
added 2020/12/09 1:23 a.m.25 views

[SECURITY] Fedora 32 Update: vips-8.8.4-5.fc32

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

5.3CVSS2.6AI score0.0198EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/12/09 12:0 a.m.20 views

Fedora: Security Advisory for vips (FEDORA-2020-d82261f7b1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS6.1AI score0.0198EPSS
SaveExploits1References2
OSV
OSV
added 2020/12/08 9:15 p.m.7 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS7.3AI score0.01764EPSS
SaveExploits0References9
NVD
NVD
added 2020/12/08 9:15 p.m.31 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

9.3CVSS7.4AI score0.01764EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2020/12/08 8:10 p.m.29 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

8AI score0.01764EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.13 views

ImageMagick Studio ImageMagick 安全漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68 that stems...

5.5CVSS6.8AI score0.01016EPSS
SaveExploits1References14
Rows per page
Query Builder