CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

CVE-2017-17787

In GIMP 2.8.22, there is a heap-based buffer over-read in readcreatorblock in plug-ins/common/file-psp.c...

CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

CVE-2017-17787

In GIMP 2.8.22, there is a heap-based buffer over-read in readcreatorblock in plug-ins/common/file-psp.c...

CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

CVE-2017-17786: Out-of-bounds Read

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

PT-2017-3732

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer overflow in the read channel data function, located in plug-ins/common/file-psp.c, which can be exploited by a remote attacker to cause a denial of service or execut...

PT-2017-3727

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the load image function in plug-ins/common/file-gbr.c of the GIMP graphic editor, specifically in the gbr import parser. This is caused by mishandling o...

PT-2017-3730

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the read creator block function, located in plug-ins/common/file-psp.c. This can potentially allow a remote attacker to cause a denial of service,...

SQL injection vulnerability in UQCMS cloud merchant B2B2C multi-store system plug.class.php page

B2B2C multi-store system is a B2B2C e-commerce software with PHP+MYSQL program and smarty template. A SQL injection vulnerability exists in the plug.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System. The vulnerability stems from the fact that the program does not adequately filt...

Hardcoded credentials

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

CVE-2015-7267

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

CVE-2015-7267

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

CVE-2015-7267

The CVE-2015-7267 entry applies to Samsung 850 Pro/PM851 SSDs and Seagate ST500LT015/ST500LT025 HDDs used in Lenovo ThinkPad T440s (BIOS 2.32) and W541 (BIOS 2.21), Dell Latitude E6410 (BIOS A16), and Latitude E6430 (BIOS A16). It describes a physical-access risk where, when the drives operate in...

CVE-2015-7267: Undefined Security Weakness

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

PT-2017-7176

Name of the Vulnerable Software and Affected Versions Samsung 850 Pro and PM851 solid-state drives versions affected versions not specified Seagate ST500LT015 and ST500LT025 hard disk drives versions affected versions not specified Lenovo ThinkPad T440s laptops with BIOS 2.32 Lenovo ThinkPad W541...

Wi-Fi Konke Smart Plug Telnet Authentication Bypass Root Privilege

The vulnerability of the Wi-Fi Konke Smart Plug remote control software relates to the absence of authentication procedures for Telnet sessions. Exploiting this vulnerability could allow a malicious actor to control the device with root privileges through port 23...

CVE-2017-15517

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...

Information disclosure

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...