Lucene search
+L

7155 matches found

CNNVD
CNNVD
•added 2021/06/10 12:00 a.m.•29 views

HTMLDOC 资源管理错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript, and PDF formats.A resource management error vulnerability exists in HTMLDOC, which stems from the pspdfexport function in ps-pdf.cxx when processing JPEG images A boundary error exists. A...

9.8CVSS6.3AI score0.02436EPSS
SaveExploits1References8
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2018:2840-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.042EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2012:0997-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.04765EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•36 views

SUSE: Security Advisory (SUSE-SU-2014:1631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.02889EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2018:1825-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.03401EPSS
SaveExploits1References6
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•46 views

SUSE: Security Advisory (SUSE-SU-2020:3359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS5.7AI score0.03758EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2021/06/06 12:45 p.m.•6 views

simd:simd_load_fuzzer: Index-out-of-bounds in Simd::Base::jpeg__build_huffman

Project: https://github.com/ermig1979/Simd.git Detailed Report: https://oss-fuzz.com/testcase?key=6271414796681216 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerubsansimd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

5.9AI score
SaveExploits0
NVD
NVD
•added 2021/06/04 4:15 p.m.•35 views

CVE-2020-36141

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header...

8.8CVSS0.01325EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/02 4:15 p.m.•3 views

DEBIAN-CVE-2021-25287

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2kugrayala...

9.1CVSS7.5AI score0.02931EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/02 4:15 p.m.•11 views

CVE-2021-25287

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2kugrayala...

9.1CVSS7.4AI score0.02931EPSS
SaveExploits0References6
PyPA
PyPA
•added 2021/06/02 4:15 p.m.•13 views

PYSEC-2021-137

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2kugrayala...

9.1CVSS7AI score0.02931EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/06/01 3:15 p.m.•48 views

CVE-2020-17541

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

8.8CVSS8AI score
SaveExploits0References2
Prion
Prion
•added 2021/06/01 3:15 p.m.•28 views

Stack overflow

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

6.8CVSS8.9AI score0.02728EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2021/06/01 3:15 p.m.•11 views

UBUNTU-CVE-2020-17541

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

8.8CVSS7.6AI score0.02728EPSS
SaveExploits1References4
CVE
CVE
•added 2021/06/01 2:44 p.m.•391 views

CVE-2020-17541

CVE-2020-17541 affects libjpeg-turbo across all versions, with a stack-based buffer overflow in the transform component. A remote attacker could send a malformed JPEG to trigger arbitrary code execution or a denial of service. Connected advisories/components show concrete fixes or updates: Amazon...

8.8CVSS7.6AI score0.02728EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/06/01 2:44 p.m.•30 views

CVE-2020-17541

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...

9AI score0.02728EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/06/01 12:00 a.m.•20 views

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in ImageGear 19.9 that originates from an out-of-bounds write in the JPG Handle JPEG420 function. An attacker can exploit the vulnerability to cause memory corruption by...

9.8CVSS5.8AI score0.01215EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/06/01 12:00 a.m.•19 views

Accusoft ImageGear缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in Accusoft ImageGear versions 19.8 and 19.9, which stems from an out-of-bounds write vulnerability in the program's JPG comp header processing functionality that can be...

9.8CVSS5.6AI score0.01137EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2021/05/31 12:00 a.m.•231 views

Backdoor.Win32.Netbus.12 Information Disclosure

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d9822984ed546cbf3ccffd149d1d2af5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Netbus.12 Vulnerability: Unauthenticated Information Disclosure Description: The...

7.4AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/05/24 12:15 p.m.•17 views

CVE-2021-21988

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

6.5CVSS6.5AI score0.00453EPSS
SaveExploits0References3
Rows per page
Query Builder