5456 matches found
[SECURITY] Fedora 26 Update: kernel-4.13.4-200.fc26
The kernel meta package...
CVE-2017-1000099
When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user stdout or the application's provide callback, which could lead to other private data from the heap to...
Legal Robot: Allowance of Meta/Null characters
Dear sir, I am very happy to report a vulnerability to legalrobot. Recently, the report 260468 is disclosed publicly and that report describes about the restriction lengths of profile fields "first name and last name". Now, i am reporting an another vulnerability regarding those profile fields...
CVE-2017-14858
There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...
[SECURITY] Fedora 26 Update: kernel-4.12.14-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.11-300.fc26
The kernel meta package...
jRank Topsites 1.0 Cross Site Request Forgery / Code Injection
Meta Tags File Footer File /tbody...
[SECURITY] Fedora 25 Update: kernel-4.12.9-200.fc25
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.9-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.8-300.fc26
The kernel meta package...
GSA Bounty: Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov
Description Hi. I just noticed, that you are extended the scope for the bounty program. I looked to the first resource - https://federation.data.gov/ I noticed, that the x-amz-meta-s3cmd-attrs response header returns sensitive information, like system username:...
ImageMagick Denial of Service Vulnerability (CNVD-2017-236955)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'formatIPTC' function of the coders/meta.c file in ImageMagick version...
UBUNTU-CVE-2017-13062
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...
CVE-2015-3649
The CVE-2015-3649 entry concerns the Ruby gem open-uri-cached. Affected component: open-uri-cached Ruby gem; root cause: insecure/predictable temporary file handling in /tmp, where a directory named with openuri- and a meta/marker file is created, allowing a local attacker to place Ruby code and ...
The vulnerability of the parse8BIMW and format8BIM functions in the coder/meta.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.
The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...
DEBIAN-CVE-2017-12418
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...
ImageMagick coders/meta.c file memory leak vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'parse8BIMW' and 'format8BIM' functions of the coders/meta.c file in...
[SECURITY] Fedora 25 Update: kernel-4.11.12-200.fc25
The kernel meta package...
acacias-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-269733 Description| Value ---|--- Affected Website:| acacias-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...