1022 matches found
Denial Of Service (DoS) Through Out-Of-Bounds Read
libtiff.so is vulnerable to out-of-bounds read. This is due to an illegal read via the src variable in the setrow function in the thumbnail tool thumbnail.c which allows an attacker to cause a denial of service condition...
Unpatched WordPress Flaw Gives Attackers Full Control Over Your Site
UPDATE— WordPress has released version 4.9.7 to finally patch this vulnerability that could allow remote attackers to gain full control over affected websites. You are recommended to install the latest available version of WordPress as soon as possible. Last week we received a tip about an...
DEBIAN-CVE-2017-2908
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...
UBUNTU-CVE-2017-2908
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...
CVE-2017-2908
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...
MediaWiki 1.18.0 Installation Path Disclosure Vulnerability - Linux
MediaWiki allows remote attackers to obtain the installation path via vectors related to thumbnail creation. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
MediaWiki 1.18.0 Installation Path Disclosure Vulnerability - Windows
MediaWiki allows remote attackers to obtain the installation path via vectors related to thumbnail creation. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2014-1686
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...
UBUNTU-CVE-2014-1686
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...
CVE-2014-1686
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...
Design/Logic Flaw
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...
CVE-2014-1686
CVE-2014-1686 affects MediaWiki 1.18.0 and allows remote disclosure of the installation path via thumbnail creation vectors. Provided sources consistently describe path disclosure with CVSS v2/v3 base scores around 5.0–5.3 (MEDIUM). Some OpenVAS entries indicate a vendor patch is available, but n...
CVE-2014-1686
Removed by vendor...
chromium-browser: leak of page thumbnails in new tab page
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
Google Chrome for Mac, Windows and Linux New Tab Page Information Disclosure Vulnerability
Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.New Tab Page is one of the modules used to create new tab pages. A security vulnerability exists in New Tab Page in versions of Google Chrome prior to 64.0.3282.119 for Windows,...
CVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...
Blender Directory Browsing Thumbnail Viewer Integer Overflow Vulnerability
Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Directory...
Blender Directory Browsing Thumbnail Viewer Integer Overflow Code Execution Vulnerability
Summary An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...