tesseract 数字错误漏洞

tesseract is an open source OCR Optical Character Recognition engine. A numeric error vulnerability exists in the Leptonica linked library v1.79.0 in tesseract v5.0.0, which can be exploited by an attacker to cause an arithmetic anomaly via a specially crafted JPEG file, leading to a denial of...

Command Injection

npos-tesseract is vulnerable to command injection. The vulnerability exists because the module.export function of ocr.js does not properly sanitize the options and image parameters, allowing an attacker to inject and execute malicious code...

GHSA-MPWP-PF96-9G4R npos-tesseract Command Injection vulnerability

A command injection vulnerability affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)

npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: OSV:GHSA-MPWP-PF96-9G4R...

npos-tesseract Command Injection vulnerability

A command injection vulnerability affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

Code injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453 Command Injection

This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...

CVE-2020-28453

CVE-2020-28453 affects all versions of the npm package npos-tesseract. The vulnerability is a command injection flaw caused by improper sanitization at line 55 in lib/ocr.js, enabling injection via options/image parameters. Public sources describe the issue as critical (CVSS up to 9.8 from NVD) w...

npos-ocr 命令注入漏洞

npos-ocr is an OCR tool for npos that uses the tesseract engine. A command injection vulnerability exists in all versions of npos-ocr, which stems from the presence of command injection...

PT-2022-8900 · Unknown · Npos-Tesseract

Name of the Vulnerable Software and Affected Versions: npos-tesseract affected versions not specified Description: The issue affects all versions of the package npos-tesseract. It is a command injection vulnerability with the injection point located in line 55 of the lib/ocr.js file...

Command Injection

ntesseract is vulnerable to command injection. A remote attacker is able to inject and execute malicious commands through the command function of tesseract.js...

tesseract 命令注入漏洞

tesseract is an open source OCR Optical Character Recognition engine. A security vulnerability exists in tesseract, which stems from a command injection attack injection point in the tesseract.js file...

new packages: tesseract-tessdata

An update is available for tesseract-tessdata. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: tesseract

An update is available for tesseract. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

Fedora: Security Advisory for tesseract (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tesseract bug fix and enhancement update

An update is available for tesseract. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

ALEA-2021:4335 tesseract bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

tesseract resource management error vulnerability

tesseract is an open source OCR Optical Character Recognition engine. tesseract OCR has a security vulnerability that stems from the fact that Tesseract OCR has oneellconflict use-after-free during strpbrk calls. no details of the vulnerability are currently available...