Lucene search
+L

1378 matches found

OSV
OSV
•added 2019/05/14 4:01 a.m.•26 views

GHSA-RJX9-2936-9FFX Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.9AI score0.01931EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2019/05/14 4:00 a.m.•53 views

Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS3.7AI score0.01931EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2019/05/14 4:00 a.m.•9 views

GHSA-G99M-3M46-4GM9 Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.9AI score0.01931EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/05/07 2:56 a.m.•23 views

Denial Of Service (DoS)

Apache commons-imaging previously known as Apache Sanselan is susceptible to denial of service DoS attack. The vulnerability can be triggered by sending some malicious input causing an infinite loop when the input is processed...

7.5CVSS7.2AI score0.01931EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2019/05/06 6:29 p.m.•14 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References1
Prion
Prion
•added 2019/05/06 6:29 p.m.•22 views

Code injection

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/05/06 6:29 p.m.•18 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS5.8AI score0.01931EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/06 6:29 p.m.•38 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS7.5AI score0.01931EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/06 6:29 p.m.•33 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5CVSS7.5AI score0.01931EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/06 5:14 p.m.•48 views

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5AI score0.01931EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/06 5:14 p.m.•100 views

CVE-2018-17202

CVE-2018-17202 affects Apache Sanselan (incubating), later renamed Apache Commons Imaging. The issue is an infinite-loop DoS triggered when parsing certain input files, leading to potential denial of service. Supported by multiple connected records (Red Hat, Veracode, GHSA, OSV, CVE/NVD) that des...

7.5CVSS7.4AI score0.01931EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/05/06 5:07 p.m.•55 views

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

7.5AI score0.01931EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/05/06 7:09 a.m.•30 views

Denial Of Service (DoS)

Apache Commons Imaging Previously named as Apache Sanselan is vulnerable to denial of service attacks. A remote attacker is able to crash the application via image files containing malicious Exif metadata...

7.5CVSS7.2AI score0.01931EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2019/05/06 12:00 a.m.•5 views

PT-2019-9412

Name of the Vulnerable Software and Affected Versions Apache Commons Imaging version 0.97-incubator Description The issue allows certain input files to cause the code to enter an infinite loop when parsed, potentially leading to a Denial of Service DoS attack. Recommendations For version...

7.5CVSS0.01931EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2019/05/02 10:29 p.m.•16 views

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...

9.3CVSS7.5AI score0.02762EPSS
SaveExploits2References7
OSV
OSV
•added 2019/05/02 10:29 p.m.•17 views

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...

7.8CVSS7.5AI score0.02762EPSS
SaveExploits2References5
Veracode
Veracode
•added 2019/05/02 4:45 a.m.•35 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and Software Development Kit is susceptible to sandbox restriction bypass. Due to the flaws in ImagingLib and the image attribute, channel, layout and raster processing in the 2D component, it does not prevent an untrusted Java application or applet to trigger...

10CVSS6.1AI score0.10179EPSS
SaveExploits0References36Affected Software3
HackRead
HackRead
•added 2019/04/05 12:02 p.m.•70 views

New malware can modify CT and MRI scan results

By Waqas Call it killer malware? Israeli researchers have developed a new malware that highlights some very critical and dangerous security vulnerabilities in medical imaging equipment, which is commonly used to diagnose serious health conditions like cancer and hypertrophic cardiomyopathy HCM. N...

0.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2019/02/23 12:23 p.m.•293 views

OSFClone - Open Source Utility To Create And Clone Forensic Disk Images

OSFClone is a free, self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. In addition to raw disk images, OSFClone also supports imaging drives to the open Advance Forensics Format AFF , AFF is an open and...

7.3AI score
SaveExploits0
Veracode
Veracode
•added 2019/01/15 8:53 a.m.•43 views

Arbitrary File Overwrite

hplip3 is vulnerable to arbitrary file overwrite attacks. The vulnerability exists as the senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out...

1.2CVSS5.8AI score0.00444EPSS
SaveExploits0References17Affected Software2
Rows per page
Query Builder