Atomicparsley 缓冲区错误漏洞

Atomicparsley is an open source, lightweight command-line program for reading, parsing, and setting metadata into MPEG-4 files, specifically iTunes-style metadata. A security vulnerability exists in Atomicparsley 20210124.204813.840499f, which stems from a stack overflow vulnerability via APar...

CVE-2021-3486

GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code...

CVE-2020-15163

Python TUF The Update Framework reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata i.e. by a...

Arbitrary Command Execution

im-metadata is vulnerable to arbitrary command execution. The vulnerability is possible because the metadata options and arguments to the exec command was not filtered and directly processed...

Command Injection

Overview im-metadata is a package to retrieve image metadata as a JSON object using ImageMagick's identify command. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the metadata options which is given to the exec functio...

CVE-2016-9094

Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file...

Exiv2 Exiv2::Image::printIFDStructure Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the...

The vulnerability of the metadata function of the Adobe Flash Player allows a hacker to execute arbitrary code.

The vulnerability of the metadata functionality of the Adobe Flash Player is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Android Camera Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the camera/src/camerametadata.c file in Android's Camera service allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...