Lucene search
+L

12149 matches found

OSS-Fuzz
OSS-Fuzz
added 2019/07/02 12:27 p.m.15 views

imagemagick/encoder_pdf_fuzzer: Use-of-uninitialized-value in ReadPDFInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5629534981849088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdffuzzer Fuzz target binary: encoderpdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

7AI score
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.22 views

Advantech WebAccess Node viewsrv SQLDescribeParam Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E8 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.1AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.35 views

Advantech WebAccess Node viewsrv ftell Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x277F IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.35 views

Advantech WebAccess Node viewsrv fWrite Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x277D IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.4AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.26 views

Advantech WebAccess Node viewsrv SQLNumResultCols Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E7 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.3AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.27 views

Advantech WebAccess Node viewsrv SQLCancel Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27EB IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:00 a.m.37 views

Advantech WebAccess Node viewsrv SQLFreeEnv Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27D9 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/02 12:00 a.m.59 views

Centreon Arbitrary System Command Execution Vulnerability

Centreon is a free and open source IT and application monitoring software. An arbitrary system command execution vulnerability exists in Centreon 19.04. An attacker can insert arbitrary commands into the database using the "initscript"-"Monitoring Engine Binary" value in main.get.php and execute...

9CVSS7.7AI score0.32156EPSS
SaveExploits7References1
OSV
OSV
added 2019/07/01 8:15 p.m.8 views

ALPINE-CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS6.9AI score0.03276EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/01 8:15 p.m.7 views

DEBIAN-CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS9.1AI score0.03276EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2019/07/01 8:15 p.m.5 views

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS5.5AI score0.03276EPSS
SaveExploits0References13
OSV
OSV
added 2019/07/01 8:15 p.m.5 views

UBUNTU-CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS6.8AI score0.03276EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2019/07/01 12:00 a.m.52 views

ImageMagick <= 7.0.8-34 Multiple Vulnerabilities - Windows

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.02381EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2019/07/01 12:00 a.m.7 views

PT-2019-5191 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-50 Description: The issue is related to a "use of uninitialized value" in the ReadCUTImage function in coders/cut.c. It is also described as a vulnerability due to insufficient input validation in the...

9.8CVSS6.2AI score0.05916EPSS
SaveExploits103References656
OSS-Fuzz
OSS-Fuzz
added 2019/06/30 11:50 p.m.17 views

mruby/mruby_fuzzer: Use-of-uninitialized-value in ht_copy

Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5098398899765248 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

7AI score
SaveExploits0Affected Software1
Prion
Prion
added 2019/06/30 11:15 p.m.17 views

Integer overflow

An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset...

4.3CVSS6.2AI score0.01427EPSS
SaveExploits1References3Affected Software2
Akamai Blog
Akamai Blog
added 2019/06/28 4:00 p.m.13 views

Enhancing Customer Value, Building Customer Relationships and Strengthening Team Collaboration

Effective communication skills are fundamental to developing both immediate and long term relationships with our customers. How else can we learn the answers to questions such as: "What are our customers concerns, needs, and desires?", "How can we best address their short and long term needs?", A...

6.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
added 2019/06/28 7:41 a.m.19 views

imagemagick/encoder_pjpeg_fuzzer: Use-of-uninitialized-value in encode_mcu_DC_first

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5712832717389824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpjpegfuzzer Fuzz target binary: encoderpjpegfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

7AI score
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2019/06/27 9:19 a.m.20 views

libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c

A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemorystrdupanddequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7.1...

9.8CVSS7.6AI score0.10527EPSS
SaveExploits4References6
OSV
OSV
added 2019/06/26 6:15 p.m.4 views

DEBIAN-CVE-2019-12979

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...

7.8CVSS8AI score0.02357EPSS
SaveExploits0References1
Rows per page
Query Builder