Lucene search
+L

7199 matches found

osv_ghsa
osv_ghsa
•added 2022/06/11 12:00 a.m.•42 views

GHSA-XVF7-4V9Q-58W6 Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

7.5CVSS5.9AI score0.01868EPSS
SaveExploits1References7
vulnersOsv
vulnersOsv
•added 2022/06/11 12:00 a.m.•9 views

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3474 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1, <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2022-25851 Source advisory: OSV:GHSA-XVF7-4V9Q-58W6...

7.5CVSS7.2AI score0.01868EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/06/11 12:00 a.m.•44 views

Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

7.5CVSS3.2AI score0.01868EPSS
SaveExploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/06/11 12:00 a.m.•59 views

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2022:2035-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2035-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may tak...

8.1CVSS7.3AI score0.01273EPSS
SaveExploits0References25
Tenable Nessus
Tenable Nessus
•added 2022/06/11 12:00 a.m.•43 views

SUSE SLES12 Security Update : grub2 (SUSE-SU-2022:2039-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2039-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap...

8.1CVSS7.3AI score0.01273EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
•added 2022/06/11 12:00 a.m.•38 views

SUSE SLES15 Security Update : grub2 (SUSE-SU-2022:2041-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2041-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that t...

8.1CVSS7.3AI score0.01273EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
•added 2022/06/11 12:00 a.m.•53 views

SUSE SLES12 Security Update : grub2 (SUSE-SU-2022:2037-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2037-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that t...

8.1CVSS7.3AI score0.01273EPSS
SaveExploits0References22
OpenVAS
OpenVAS
•added 2022/06/11 12:00 a.m.•42 views

openSUSE: Security Advisory for grub2 (SUSE-SU-2022:2035-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS7.1AI score0.01273EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/10 8:15 p.m.•36 views

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

7.5CVSS0.01868EPSS
SaveExploits1References5
Prion
Prion
•added 2022/06/10 8:15 p.m.•30 views

Design/Logic Flaw

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

5CVSS7.4AI score0.01868EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2022/06/10 8:05 p.m.•38 views

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

7.5CVSS7.7AI score0.01868EPSS
SaveExploits1References5
CVE
CVE
•added 2022/06/10 8:05 p.m.•117 views

CVE-2022-25851

CVE-2022-25851 affects the jpeg-js package prior to 0.4.4, with a Denial of Service caused by improper input validation that can trigger an infinite loop. IBM’s security bulletin clarifies impact to IBM Edge Application Manager (versions 4.3 and 4.4) and notes the existence of fixes via a docker ...

7.5CVSS7.4AI score0.01868EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2022/06/10 8:05 p.m.•43 views

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

7.5CVSS7.1AI score
SaveExploits0References7
Mend
Mend
•added 2022/06/10 8:05 p.m.•5 views

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

8.7CVSS0.01868EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2022/06/10 8:00 p.m.•10 views

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

7.5CVSS7.1AI score0.01868EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/06/10 3:15 p.m.•6 views

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS5.8AI score0.00879EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2022/06/10 3:15 p.m.•9 views

DEBIAN-CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS6.3AI score0.00879EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/10 3:15 p.m.•29 views

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS0.00879EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/06/10 3:15 p.m.•39 views

UBUNTU-CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS5.8AI score0.00879EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2022/06/10 3:15 p.m.•42 views

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS6.6AI score0.00879EPSS
SaveExploits1References1
Rows per page
Query Builder