Lucene search
+L

246 matches found

Prion
Prion
added 2022/08/02 2:15 p.m.18 views

Code injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

7.5CVSS9.6AI score0.01264EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/02 1:25 p.m.36 views

CVE-2020-28453 Command Injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

9.4CVSS9.7AI score0.01264EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/02 1:25 p.m.71 views

CVE-2020-28453

CVE-2020-28453 affects all versions of the npm package npos-tesseract. The vulnerability is a command injection flaw caused by improper sanitization at line 55 in lib/ocr.js, enabling injection via options/image parameters. Public sources describe the issue as critical (CVSS up to 9.8 from NVD) w...

9.8CVSS9.7AI score0.01264EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/02 12:00 a.m.10 views

npos-ocr 命令注入漏洞

npos-ocr is an OCR tool for npos that uses the tesseract engine. A command injection vulnerability exists in all versions of npos-ocr, which stems from the presence of command injection...

9.8CVSS8.3AI score0.01264EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/02 12:00 a.m.10 views

PT-2022-8900 · Unknown · Npos-Tesseract

Name of the Vulnerable Software and Affected Versions: npos-tesseract affected versions not specified Description: The issue affects all versions of the package npos-tesseract. It is a command injection vulnerability with the injection point located in line 55 of the lib/ocr.js file...

9.8CVSS9.6AI score0.01264EPSS
SaveExploits1References6
Veracode
Veracode
added 2022/07/26 5:25 a.m.29 views

Command Injection

ntesseract is vulnerable to command injection. A remote attacker is able to inject and execute malicious commands through the command function of tesseract.js...

9.8CVSS9.6AI score0.03472EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/25 12:00 a.m.8 views

tesseract 命令注入漏洞

tesseract is an open source OCR Optical Character Recognition engine. A security vulnerability exists in tesseract, which stems from a command injection attack injection point in the tesseract.js file...

9.8CVSS8.3AI score0.03472EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added 2022/05/17 7:36 a.m.20 views

new packages: tesseract-tessdata

An update is available for tesseract-tessdata. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/05/17 7:36 a.m.22 views

new packages: tesseract

An update is available for tesseract. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

1.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/03/27 12:00 a.m.6 views

Fedora: Security Advisory for tesseract (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rockylinux
Rockylinux
added 2021/11/09 9:01 a.m.21 views

tesseract bug fix and enhancement update

An update is available for tesseract. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

1.9AI score
SaveExploits0
OSV
OSV
added 2021/11/09 9:01 a.m.12 views

ALEA-2021:4335 tesseract bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
CNVD
CNVD
added 2021/07/02 12:00 a.m.44 views

tesseract resource management error vulnerability

tesseract is an open source OCR Optical Character Recognition engine. tesseract OCR has a security vulnerability that stems from the fact that Tesseract OCR has oneellconflict use-after-free during strpbrk calls. no details of the vulnerability are currently available...

7.8CVSS1.7AI score0.00887EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/01 3:15 a.m.8 views

DEBIAN-CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS7.5AI score0.00887EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/01 3:15 a.m.32 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS0.00887EPSS
SaveExploits1References3
OSV
OSV
added 2021/07/01 3:15 a.m.22 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS6.9AI score
SaveExploits0References3
OSV
OSV
added 2021/07/01 3:15 a.m.10 views

UBUNTU-CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS5.8AI score0.00887EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/07/01 3:15 a.m.19 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS7.1AI score0.00887EPSS
SaveExploits1References4
Prion
Prion
added 2021/07/01 3:15 a.m.20 views

Design/Logic Flaw

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

6.8CVSS7.6AI score0.00887EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/01 3:15 a.m.30 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS7.1AI score0.00887EPSS
SaveExploits1References4
Rows per page
Query Builder