15548 matches found
Dragonfly Ruby Gem < 1.4.0 Argument Injection Vulnerability - Active Check
Dragonfly Ruby Gem is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via a crafted URL when the verifyurl option is disabled. This happens due to mishandling of the ImageMagick convert utility. NOTE: This vulnerability has also been identified as: CVE-2021-33473 Remediation Upgra...
CVE-2021-33564
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
Design/Logic Flaw
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
CVE-2021-33564
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
CVE-2021-33564
Summary: CVE-2021-33564 affects the Dragonfly Ruby Gem prior to 1.4.0. An argument injection flaw allows remote attackers to read and write arbitrary files via a crafted URL when the verify_url option is disabled, potentially enabling arbitrary code execution. The root cause is described as misha...
dragonfly -- argument injection
NVD reports: An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2021-1876)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2021-1902)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : ImageMagick (openSUSE-2021-606)
This update for ImageMagick fixes the following issues : - CVE-2021-20309: Division by zero in WaveImage of MagickCore/visual-effects. bsc1184624 - CVE-2021-20311: Division by zero in sRGBTransformImage in MagickCore/colorspace.c bsc1184626 - CVE-2021-20312: Integer overflow in WriteTHUMBNAILImag...
EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2021-1902)
According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that ...
EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2021-1876)
According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that ...
CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
DEBIAN-CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
Design/Logic Flaw
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
UBUNTU-CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
CVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...
CVE-2020-27769
The CVE-2020-27769 entry concerns ImageMagick: in versions before 7.0.9-0, there are values outside the representable range for type float in MagickCore/quantize.c. This indicates a potential for undefined behavior or crash when processing crafted inputs through that code path. Public exploitatio...