PT-2026-41170

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.3 Description An application-wide Cross-Site Request Forgery CSRF issue exists in the image uploading functionality. An attacker can set an image URL to a malicious endpoint, causing any authenticated user who...

EUVD-2018-7987

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-5060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer...

CVE-2019-5060

An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a heap...

Simple DirectMedia Layer SDL2_image Information Disclosure Vulnerability (CNVD-2018-08711)

Simple DirectMedia Layer is a cross-platform development library that provides low-level access to audio, keyboard, mouse, and graphics hardware devices, etc. via OpenGL and Direct3D. A security vulnerability exists in the PCX image rendering feature of Simple DirectMedia Layer SDL2image-2.0.2. T...

Simple DirectMedia Layer SDL2_image Information Disclosure Vulnerability

Simple DirectMedia Layer is a cross-platform development library that provides low-level access to audio, keyboard, mouse, and graphics hardware devices, etc. via OpenGL and Direct3D. A security vulnerability exists in the XCF image rendering feature in Simple DirectMedia Layer SDL2image-2.0.2. T...

PT-2018-5643 · Sdl +2 · Sdl2 Image +2

Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2 Description: A code execution issue exists in the BMP image rendering functionality. A specially crafted BMP image can cause a stack overflow, resulting in code execution. An attacker can trigger this issue by...