Lucene search
K

7703 matches found

CNVD
CNVD
added 2018/12/28 12:0 a.m.3 views

Libcaca Illegal Write Memory Access Vulnerability

libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the loadimage function in common-image.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.5AI score0.01898EPSS
Exploits1References1
OSV
OSV
added 2018/12/28 12:0 a.m.0 views

UBUNTU-CVE-2018-20548

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 1bpp data...

8.8CVSS5.8AI score0.00811EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.7 views

The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.

The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...

5.5CVSS5.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.3 views

The vulnerability of the xcf_load_stream function in the GIMP graphics editor, which involves reading beyond the buffer limit, allows attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the xcfloadstream function /xcf/xcf.c in the GIMP graphic editor, GNU Image Manipulation Program, relates to reading beyond the buffer boundaries during string processing, especially when dealing with strings that do not contain the null character '\0'. Exploiting this...

7.8CVSS6.3AI score0.00479EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.3 views

The vulnerability of the load_image function in the GIMP graphic editor, related to reading beyond the buffer limit of memory, allows attackers to cause system failures, undermine data integrity, and compromise confidentiality.

The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...

7.8CVSS6.7AI score0.00326EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/12/26 5:45 p.m.1 views

GHSA-V4X4-98CG-WR4G Code injection in Danijar Definitions

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS7.4AI score0.0353EPSS
Exploits1References5
CNVD
CNVD
added 2018/12/25 12:0 a.m.3 views

Foxit Quick PDF Library Stack Buffer Overflow Vulnerability

Foxit Quick PDF Library is China's Foxit Foxit Software Corporation, a PDF SDK Software Development Kit. The product is mainly used to create, render and edit PDF documents. Foxit Quick PDF Library in the 'LoadFromFile', 'LoadFromString' and 'LoadFromStream ' functions in PDF Library contain a...

7.8CVSS8.1AI score0.44944EPSS
Exploits0References1
OSV
OSV
added 2018/12/24 6:29 p.m.3 views

CVE-2018-20247

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow...

7.8CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2018/12/23 2:29 a.m.2 views

CVE-2018-20369

Barracuda Message Archiver 2018 has XSS in the errormsg exception-handling value for the ldapuser parameter to the cgi-mod/ldaploadentry.cgi module. The injection point of the issue is the AddUpdate module...

6.1CVSS5.8AI score0.00328EPSS
Exploits3References1
PyPA
PyPA
added 2018/12/21 11:29 p.m.4 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS7.7AI score0.0353EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2018/12/21 11:29 p.m.10 views

Design/Logic Flaw

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

7.5CVSS9.9AI score0.0353EPSS
Exploits1References1
OSV
OSV
added 2018/12/21 11:29 p.m.2 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6AI score
Exploits0References1
OSV
OSV
added 2018/12/21 11:29 p.m.8 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6.1AI score0.0353EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/12/21 10:0 p.m.26 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

10AI score0.0353EPSS
Exploits1References1
CVE
CVE
added 2018/12/21 10:0 p.m.72 views

CVE-2018-20325

CVE-2018-20325 affects the Danijar Hafner definitions package for Python. The vulnerability resides in the load() method of definitions/parser.py, allowing execution of arbitrary Python commands and resulting in command execution. The available documents identify the vulnerable component and the ...

9.8CVSS9.9AI score0.0353EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/12/21 9:29 a.m.1 views

ALPINE-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.00334EPSS
Exploits0References1
CNVD
CNVD
added 2018/12/19 12:0 a.m.2 views

LibRaw 'unpacked_load_raw()' Function Denial of Service Vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A denial of service vulnerability exists in the LibRaw 'unpackedloadraw' function. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

7.5CVSS8.4AI score0.01167EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.1 views

PT-2023-15159 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a segmentation violation via the function gf sm load init swf at scene manager/swf parse.c. No information is provided about the estimated number of potentiall...

9.8CVSS7.5AI score0.01461EPSS
Exploits150References373
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.2 views

PT-2023-15164 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow in the gf text process sub function of filters/load text.c. This function is part of the GPAC MP4box, which is used for processing and...

9.8CVSS7AI score0.01461EPSS
Exploits150References372
OSV
OSV
added 2018/12/17 3:29 p.m.1 views

DEBIAN-CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS5.3AI score0.0531EPSS
Exploits1References1
Rows per page
Query Builder