4867 matches found
CVE-2017-14858
There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...
[SECURITY] Fedora 26 Update: kernel-4.12.14-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.11-300.fc26
The kernel meta package...
jRank Topsites 1.0 Cross Site Request Forgery / Code Injection
Meta Tags File Footer File /tbody...
[SECURITY] Fedora 25 Update: kernel-4.12.9-200.fc25
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.9-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.8-300.fc26
The kernel meta package...
GSA Bounty: Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov
Description Hi. I just noticed, that you are extended the scope for the bounty program. I looked to the first resource - https://federation.data.gov/ I noticed, that the x-amz-meta-s3cmd-attrs response header returns sensitive information, like system username:...
ImageMagick Denial of Service Vulnerability (CNVD-2017-236955)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'formatIPTC' function of the coders/meta.c file in ImageMagick version...
UBUNTU-CVE-2017-13062
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...
CVE-2015-3649
The CVE-2015-3649 entry concerns the Ruby gem open-uri-cached. Affected component: open-uri-cached Ruby gem; root cause: insecure/predictable temporary file handling in /tmp, where a directory named with openuri- and a meta/marker file is created, allowing a local attacker to place Ruby code and ...
The vulnerability of the parse8BIMW and format8BIM functions in the coder/meta.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.
The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...
DEBIAN-CVE-2017-12418
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...
ImageMagick coders/meta.c file memory leak vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'parse8BIMW' and 'format8BIM' functions of the coders/meta.c file in...
[SECURITY] Fedora 25 Update: kernel-4.11.12-200.fc25
The kernel meta package...
acacias-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-269733 Description| Value ---|--- Affected Website:| acacias-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[SECURITY] Fedora 26 Update: kernel-4.11.11-300.fc26
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.11.10-100.fc24
The kernel meta package...
WakaTime: Missing filteration of meta characters in all full name field on wakatime.com
Hi there Vulnerability Title: Meta characters are not filtered into full name Description You haven't filtered control meta characters such as %00 etc in full name field which allows an attacker to impersonate or hide their real identity within the application. This one is not rejected. It turns...