Lucene search
+L

2404 matches found

ATTACKERKB
ATTACKERKB
added 2021/09/08 2:15 p.m.6 views

CVE-2021-30779

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS5.8AI score0.01293EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/09/08 1:49 p.m.26 views

CVE-2021-30792

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution...

8.4AI score0.01291EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/09/08 1:44 p.m.43 views

CVE-2021-30743

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...

8.4AI score0.01196EPSS
SaveExploits0References5
CVE
CVE
added 2021/09/08 1:44 p.m.92 views

CVE-2021-30752

The CVE-2021-30752 issue affects Apple platforms including macOS Big Sur 11.3, iOS 14.5 / iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Description indicates that Processing a maliciously crafted image could lead to arbitrary code execution, caused by an out-of-bounds read that was addressed with impr...

7.8CVSS8AI score0.01162EPSS
SaveExploits0References4Affected Software5
Redos
Redos
added 2021/09/08 12:0 a.m.36 views

ROS-2-809

2.809 Multiple Vulnerabilities in LibTIFF 1. Vulnerability description: CVE-2020-35524 CVE-2020-35523 CVE-2020-35522 CVE-2020-35522 CVE-2020-35521 The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a boundary error in TIFF...

7.8CVSS8.3AI score0.01922EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:0 a.m.7 views

ROS-2-2117

2.2117 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS9.6AI score0.02662EPSS
SaveExploits0
NVD
NVD
added 2021/09/07 3:15 p.m.24 views

CVE-2021-33286

In NTFS-3G versions 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...

7.8CVSS0.00461EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.7 views

The vulnerability in the Google Chrome web browser for iOS operating systems relates to deficiencies in access control when processing images. This allows a malicious actor to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Google Chrome web browser on iOS operating systems is related to deficiencies in access control when processing images. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by opening ...

6.4CVSS6.5AI score0.01791EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/08/24 7:15 p.m.26 views

CVE-2021-30939

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS0.0405EPSS
SaveExploits0References8
OSV
OSV
added 2021/08/24 7:15 p.m.3 views

CVE-2021-30926

Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS7.3AI score0.0132EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/08/24 12:0 a.m.6 views

PT-2021-6083 · Apple · Macos Catalina +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3...

7.8CVSS7.7AI score0.0405EPSS
SaveExploits0References13
CNVD
CNVD
added 2021/08/18 12:0 a.m.33 views

Adobe Photoshop heap buffer overflow vulnerability (CNVD-2021-63278)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. Adobe Photoshop is vulnerable to a heap buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code...

9.3CVSS3.7AI score0.04203EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/18 12:0 a.m.44 views

Adobe Photoshop out-of-bounds write vulnerability (CNVD-2021-63277)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

9.3CVSS3.2AI score0.02211EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/13 5:15 p.m.22 views

CVE-2021-38623

The deferredimageprocessing aka Deferred image processing extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption...

7.5CVSS0.00961EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/13 5:15 p.m.4 views

CVE-2021-38623

The deferredimageprocessing aka Deferred image processing extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption...

7.5CVSS7.1AI score0.00961EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/13 5:15 p.m.9 views

CVE-2021-38623

The deferredimageprocessing aka Deferred image processing extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption...

7.5CVSS7.1AI score0.00961EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/08/13 4:28 p.m.28 views

CVE-2021-38623

The deferredimageprocessing aka Deferred image processing extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption...

7.7AI score0.00961EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2279)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.7AI score0.04851EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/08/02 1:7 a.m.40 views

[SECURITY] Fedora 33 Update: python2-pillow-6.2.2-6.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. This is a minimal compatibility package for https://pagure.io/fesco/issue/2266...

9.8CVSS9.8AI score0.03162EPSS
SaveExploits0
Fedora
Fedora
added 2021/08/02 1:7 a.m.38 views

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-7.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

9.8CVSS9.8AI score0.03162EPSS
SaveExploits0
Rows per page
Query Builder