669 matches found
so-luz.com XSS vulnerability
Open Bug Bounty ID: OBB-719873 Description| Value ---|--- Affected Website:| so-luz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. An attacker is able to create a denial of service condition using malicious input to cause an infinite loop in the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. An attacker is able to crash the process by entering a malicious input to the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp which results in a heap-based buffer over-read...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service DoS. An attacker is able to crash the process via a buffer over-read by sending a malicious input to the function Exiv2::tEXtToDataBuf in pngimage.cpp...
Denial Of Service (DoS)
libdbus-c++.so is vulnerable to denial of service. The expansion of internal XML entities in the Expat-based XML parser is not disabled and potentially allows a remote attacker to cause a denial of service condition via billion laughs attack...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. A reachable assertion aborted in the function Exiv2::anonymous namespace::readHeader in bigtiffimage.cpp allows an attacker to cause a denial of service condition...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...
Denial Of Service (DoS)
libgstreamer-1.0.so is vulnerable to denial of service. An out-of-bounds heap read in the gstdatetimenewfromiso8601string function in gst/gstdatetime.c allows remote attackers to cause a denial of service condition via a malformed datetime string...
Denial Of Service (DoS)
libcroco-0.6.so is vulnerable to denial of service. An infinite loop in the crparserparseselectorcore function in cr-parser.c allows a remote attacker to cause a denial of service condition via a crafted CSS file...
so-soest.nl XSS vulnerability
Open Bug Bounty ID: OBB-698373 Description| Value ---|--- Affected Website:| so-soest.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
Denial Of Service (DoS)
libexiv2.so is vulnerable to a denial of service DoS attack. A malicious user can pass a psd file to the application that when parsed, causes an integer overflow that can crash the application...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of serviceDoS. The attack can be caused due to a flaw in updating resourcesLength parameter in the readMetadata function of psdimage.cpp...
Denial Of Service (DoS)
libbind9.so is vulnerable to denial of service. An attacker is able to trigger an infinite recursion in lwresd and named using a non absolute name for getrrsetbyname that exceeds the maximum allowable length, resulting in a denial of service condition...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. The Exiv2::IptcData::printStructure function in iptc.cpp related to the != 0x1c case, is affected with a heap-based over-read which would allow a remote attacker to cause a denial of service condition via a crafted TIFF file...
Remote Code Execution (RCE)
libSDL-1.2.so is vulnerable to remote code execution RCE. A malicious user can pass an ILBM image to the application to cause a heap overflow, crashing the application or causing arbitrary code to be executed...
Remote Code Execution (RCE)
libSDL-1.2.so is vulnerable to remote code execution. The library does not properly check the BytePerPixel variable, allowing a malicious user to pass a crafted ico image to cause an integer overflow that can cause arbitrary code to be executed...
Denial Of Service (DoS)
libgstreamer-0.10.so is vulnerable to denial of service. A remote attacker is able to produce a floating point exception in the gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c and cause the application to crash via a crafted ASF file...
Denial Of Service (DoS)
liblcms2.so is vulnerable to denial of service. The vulnerability exists in the AllocateDataSet function of cmscgats.c because of not limiting the size of the Data from integer multiplication, leading to an attack if a malicious IT8 calibration file is passed to the second argument to...
Demarshalling With Improper Bounds Check
libspice-client-glib-2.0.so, libspice-client-gtk-2.0.so, libspice-client-gtk-3.0.so are vulnerable to demarshalling with improper bounds check. The vulnerability exists due to the lack of check where demarshalling could happen at an item position beyond the message end, leading to a denial of...
Denial Of Service
libexiv2.so is vulnerable to denial of service. The Exiv2::Internal::PngChunk::parseTXTChunk function allows remote attackers to cause a denial of service condition through a heap-based buffer over-read using a crafted image file. This CVE ID is different from CVE-2018-10999...