Lucene search
+L

245 matches found

OSV
OSV
added 2021/04/06 5:15 a.m.12 views

CVE-2021-28194

The specific function in ASUS BMC’s firmware Web management page Remote image configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

4.9CVSS5.9AI score0.0181EPSS
SaveExploits0References3
CVE
CVE
added 2021/04/06 5:02 a.m.76 views

CVE-2021-28194

CVE-2021-28194 is a buffer overflow vulnerability in ASUS BMC firmware Web management page (Remote image configuration setting) caused by a function not validating the length of user-entered strings. The issue allows remote attackers to terminate the Web service via leakage after gaining privileg...

4.9CVSS5.2AI score0.0181EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/04/06 5:02 a.m.34 views

CVE-2021-28194 ASUS BMC's firmware: buffer overflow - Remote image configuration setting

The specific function in ASUS BMC’s firmware Web management page Remote image configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

4.9CVSS5.5AI score0.0181EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/12/14 11:46 a.m.15 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
NVD
NVD
added 2020/11/10 1:15 p.m.26 views

CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS9.4AI score0.03327EPSS
SaveExploits0References4
Prion
Prion
added 2020/11/10 1:15 p.m.30 views

Integer overflow

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

7.5CVSS8.7AI score0.03327EPSS
SaveExploits0References4Affected Software2
AlpineLinux
AlpineLinux
added 2020/11/10 12:50 p.m.65 views

CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS9.5AI score0.03327EPSS
SaveExploits0
OSV
OSV
added 2020/11/06 12:00 a.m.12 views

UBUNTU-CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/01 12:00 a.m.43 views

ASB-A-159625731

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS9.5AI score0.03327EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/17 4:15 p.m.14 views

CVE-2020-8226

A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF...

5.8CVSS5.5AI score0.00966EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/08/17 3:37 p.m.22 views

CVE-2020-8226

A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF...

5.5AI score0.00966EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/08/17 12:00 a.m.8 views

PT-2020-20038 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 3.2.10 phpBB versions prior to 3.3.1 Description: A vulnerability exists that allows the remote image dimensions check to be used for Server-Side Request Forgery SSRF. Recommendations: For versions prior to 3.2.10,...

5.8CVSS5.5AI score0.00966EPSS
SaveExploits0References14
Friends Of PHP
Friends Of PHP
added 2020/07/25 11:16 a.m.29 views

Vulnerability which allows remote image dimensions check to be used to SSRF

More info at https://www.phpbb.com/community/viewtopic.php?f=14&t=2562636...

5.8CVSS7.2AI score0.00966EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 2020/07/25 11:16 a.m.22 views

Vulnerability which allows remote image dimensions check to be used to SSRF

More info at https://www.phpbb.com/community/viewtopic.php?f=14&t=2562636...

5CVSS5.8AI score0.00966EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/06/10 12:00 a.m.17 views

Microsoft Outlook Security Feature Bypass Vulnerability (CNVD-2021-25015)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A security feature bypass vulnerability exists in Microsoft Outlook, which arises from the program not enforcing security settings configured on the system, and can be exploited by an attacker with a speciall...

4.3CVSS4.6AI score0.03827EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:00 a.m.35 views

Security Feature Bypass Vulnerability for Word (June 2020)

The Microsoft Word Products is missing a security update, and Therefore is affected by a security feature bypass vulnerability. An attacker who exploited this vulnerability could cause a system to load remote images which could disclose the IP address of the targeted system to the attacker. C...

4.3CVSS6.9AI score0.03827EPSS
SaveExploits0References4
NVD
NVD
added 2019/07/12 3:15 a.m.16 views

CVE-2019-13574

In lib/minimagick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command...

7.8CVSS7.6AI score0.07639EPSS
SaveExploits1References7
OSV
OSV
added 2019/07/12 3:15 a.m.18 views

CVE-2019-13574

In lib/minimagick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command...

7.8CVSS7.6AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2019/07/12 2:31 a.m.78 views

CVE-2019-13574

In lib/minimagick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command...

7.8CVSS7.7AI score0.07639EPSS
SaveExploits1
OSV
OSV
added 2018/12/28 4:29 p.m.6 views

CVE-2018-20528

JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...

6.5CVSS5.8AI score0.01047EPSS
SaveExploits0References2
Rows per page
Query Builder