CVE-2017-12603

CVE-2017-12603: OpenCV (up to 3.3) has an invalid write in cv::RLByteStream::getBytes (modules/imgcodecs/src/bitstrm.cpp) during image read via cv::imread, demonstrated by the 2-opencv-heapoverflow-fseek test. Affected component is the OpenCV image codecs; root cause is an out-of-bounds/incorrect...

CVE-2017-12601

CVE-2017-12601 is a buffer overflow in OpenCV's BMP decoder (cv::BmpDecoder::readData) in modules/imgcodecs/src/grfmt_bmp.cpp when reading images with cv::imread. Affected: OpenCV up to version 3.3; demonstrated by the 4-buf-overflow-readData-memcpy test case. The connected documents confirm the ...

CVE-2017-12606

OpenCV (Open Source Computer Vision Library) up to version 3.3 is affected by CVE-2017-12606 due to an out-of-bounds write in FillColorRow4 in utils.cpp when reading an image with cv::imread. The described impact is memory corruption, with exploitation status not provided in the supplied document...

CVE-2017-12604

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread...

CVE-2017-12598

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case...

CVE-2017-12598

CVE-2017-12598 affects OpenCV up to version 3.3.0, where an out-of-bounds read occurs in cv::RBaseStream::readBlock (modules/imgcodecs/src/bitstrm.cpp) when reading an image with cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case. The connected documents confirm the vulnerab...

MEA Financial Vision Bank Information Disclosure Vulnerability

Vision Bank offers you the convenience of enjoying online banking services through your cell phone. MEA Financial vision-bank/id420406345 app 3.0.1 for iOS fails to validate SSL servers with X.509 certificates, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2017-9559

The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

antaresvision.es XSS vulnerability

Vulnerable URL: http://www.antaresvision.es/news.asp?tipo=7==1"'--!confirmOPENBUGBOUNTY...

Five Reasons Why I Joined Wallarm

By Johan Nordstrom The question of “what made you change jobs?” may be old, but the answer with my move to Wallarm is new and clear. I have a vision how to address the dynamic threat landscape of today and Wallarm’s innovative approach to security is in line with these ideas. In my 30 years caree...

CVE-2014-2960

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

Design/Logic Flaw

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

CVE-2014-2960

This CVE concerns Vision Critical before 2014-05-30, where an information-disclosure vulnerability allowed reading arbitrary files via unspecified vectors, demonstrated with image and configuration files. Affected product: Vision Critical cloud-based intelligent user management platform (pre-2014...

CVE-2014-2960

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

antaresvision.de XSS vulnerability

Vulnerable URL: http://www.antaresvision.de/news.asp?tipo=7==2'"--!confirmOPENBUGBOUNTY...

THN Deal: Complete Linux Certification Training (Save 97%)

If you are also searching for the answers to what skills are needed for a job in cyber security, you should know that this varies widely based upon the responsibilities of a particular role, the type of company you want to work with, and especially on it’s IT architect. However, Linux is the most...

CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4056

The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrative access...

Design/Logic Flaw

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

Design/Logic Flaw

The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrative access...