Lucene search
K

17 matches found

CNNVD
CNNVD
added 2024/07/26 12:0 a.m.1 views

streamlit-geospatial 安全漏洞

streamlit-geospatial is a streamlit multi-page application for geospatial applications open-sourced by Open Geospatial Solutions. A security vulnerability exists in streamlit-geospatial that stems from 8????? The visparams variable in RasterDataVisualization.py accepts user input that is then use...

9.8CVSS7.8AI score0.01395EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/07/26 12:0 a.m.3 views

PT-2024-29275 · Unknown · Streamlit-Geospatial

Name of the Vulnerable Software and Affected Versions: streamlit-geospatial versions prior to commit c4f81d9616d40c60584e36abb15300853a66e489 Description: The issue arises from the vis params variable, which takes user input in the 8 🏜️ Raster Data Visualization.py file. This input is later used i...

9.8CVSS8AI score0.01395EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:24 a.m.3 views

SUSE CVE-2014-9679

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow...

8.8CVSS9.1AI score0.04633EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:52 a.m.2 views

SUSE CVE-2017-3079

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

10CVSS7.8AI score0.06991EPSS
Exploits0References3
OSV
OSV
added 2022/04/14 8:15 p.m.2 views

CVE-2021-40398

An out-of-bounds write vulnerability exists in the parserasterdata functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS5.8AI score0.00735EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/04/14 12:0 a.m.4 views

PT-2022-11227 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.10 Description: An out-of-bounds write issue exists in the parse raster data functionality. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger th...

8.1CVSS7.8AI score0.00735EPSS
Exploits1References4
Veracode
Veracode
added 2017/08/24 8:19 a.m.18 views

Information Disclosure

ImageMagick is susceptible to information disclosure. When loading raster data, the library accesses uninitialized data in ReadMATImage function in coders/mat.c, disclosing sensitive information...

7.5CVSS7.8AI score0.02902EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2017/07/17 1:18 p.m.2 views

CVE-2017-3099

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6AI score0.08552EPSS
Exploits0References5
OSV
OSV
added 2017/07/17 1:18 p.m.3 views

UBUNTU-CVE-2017-3099

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution...

9.8CVSS7.6AI score0.08552EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/07/12 8:47 a.m.7 views

flash-plugin: code execution issue fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution...

9.3CVSS6.1AI score0.08552EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2017/07/11 12:0 a.m.2 views

PT-2017-2556 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 26.0.0.131 and earlier Description: The issue is caused by a buffer overflow in the memory, related to the Action Script 3 raster data model in Adobe Flash Player. This can lead to arbitrary code execution if...

10CVSS7.5AI score0.08552EPSS
Exploits0References18
BDU FSTEC
BDU FSTEC
added 2017/07/06 12:0 a.m.5 views

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player allows a perpetrator to execute arbitrary code.

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotel...

10CVSS8.3AI score0.06991EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/06/20 5:29 p.m.1 views

CVE-2017-3079

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

9.8CVSS6AI score0.06991EPSS
Exploits0References5
OSV
OSV
added 2017/06/20 5:29 p.m.3 views

UBUNTU-CVE-2017-3079

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

9.8CVSS7.6AI score0.06991EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2017/06/13 8:37 p.m.3 views

flash-plugin: multiple code execution issues fixed in APSB17-17

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

10CVSS7.7AI score0.06991EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.6 views

The vulnerability of Google Chrome browser allows a malicious individual to execute arbitrary code or trigger a service denial.

Google Chrome browser contains a vulnerability related to errors in the implementation of the exchange buffer. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other effects on the system, resulting in the generation of non-standard raster data...

7.5CVSS7.7AI score0.01699EPSS
Exploits0References3Affected Software1
Mageia
Mageia
added 2015/02/15 3:57 p.m.42 views

Updated cups packages fix CVE-2014-9679

Updated cups packages fix security vulnerability: A malformed file with an invalid page header and compressed raster data can trigger a buffer overflow in cupsRasterReadPixels CVE-2014-9679...

6.8CVSS6.9AI score0.04633EPSS
Exploits0References3
Rows per page
Query Builder