SUSE CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2022-1670

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users...

Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server that stems from the fact that when Octopus Server generates a user invitation code, it can set the validity of that invitation code for a specific number of users. An attacker could use this...

CVE-2020-29204

XXL-JOB 2.2.0 allows Stored XSS in Add User to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java...

Scientific Linux Security Update : libpng on SL7.x x86_64 (20201001)

Security Fixes : - libpng: does not check length of chunks against user limit CVE-2017-12652 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141657; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Multi-Juicer - Run Capture The Flags And Security Trainings With OWASP Juice Shop

Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...

mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie'

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-1855)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1912)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DEBIAN-CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

Code injection

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2019-1000029

DoS due to changing of allowed users in root channel...

kernel: pipe: limit the per-user amount of pages allocated in pipes

It is possible for a single process to cause an OOM condition by filling large pipes with data that are never read. A typical process filling 4096 pipes with 1 MB of data will use 4 GB of memory and there can be multiple such processes, up to a per-user-limit...