CVE-2015-3405

CVE-2015-3405 concerns ntp-keygen generating MD5 keys with insufficient entropy on big-endian systems, enabling an attacker to brute-force 93 possible keys and potentially spoof NTP. The IBM Power HMC bulletin lists affected products and versions: Power HMC V7.3.0.0, V7.9.0.0, V8.1.0.0, and V8.2....

CVE-2014-4258

CVE-2014-4258 affects the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier, enabling remote authenticated users to impact confidentiality, integrity, and availability via SRINFOSC. Contained in multiple advisories; mitigations include upgrading MariaDB/Mysql-relate...

CVE-2014-9847

ImageMagick CVE-2014-9847 concerns the jng decoder. Multiple connected sources confirm a remote denial-of-service possibility: a crafted JNG file can cause the application to crash. The vulnerability affects ImageMagick 6.8.9.9 (jng decoder) and is described in CNVD-2017-04496 as a DoS in the jng...

CVE-2014-9848

Memory leak in ImageMagick (CVE-2014-9848) allows remote attackers to cause a denial of service via crafted inputs. Affected software component is ImageMagick; root cause is a memory leak leading to memory consumption. The connected documents do not specify a patch or fixed version; some advisori...

CVE-2014-9846

CVE-2014-9846 involves a buffer overflow in the ReadRLEImage function (coders/rle.c) of ImageMagick, exposed in at least ImageMagick 6.8.9.9. Remote, unauthenticated attackers could trigger an overflow, with impact described as unspecified in the CVE record. The connected OpenVAS/Nessus entries c...

CVE-2014-9845

CVE-2014-9845 : ImageMagick’s ReadDIBImage function (coders/dib.c) is vulnerable to a denial of service by processing a corrupted DIB file. The vulnerability exists in the ImageMagick code path that reads DIB images. The connected sources confirm the affected component and the crash outcome but d...

CVE-2014-9851

CVE-2014-9851 affects ImageMagick 6.8.9.9 and allows remote attackers to cause a denial of service (application crash). The vulnerability is documented in multiple feeds (including CNVD and OSV) with the issue described as a remote DoS via crafted input. Available connected sources confirm the pr...

CVE-2014-9843

CVE-2014-9843 : In ImageMagick 6.8.9.9, the DecodePSDPixels function in coders/psd.c is vulnerable. Remote attackers may exploit via unknown vectors to achieve unspecified impact. The provided connected documents do not specify concrete exploit paths, affected versions beyond 6.8.9.9, or remediat...

CVE-2014-9841

CVE-2014-9841 affects ImageMagick, with the ReadPSDLayers function in coders/psd.c vulnerable to remote exploitation via unknown vectors, related to throwing of exceptions. Public references in the provided documents confirm ImageMagick 6.8.9.9 exposure and list CVE-2014-9841 among vulnerabilitie...

CVE-2014-9849

CVE-2014-9849 : The png coder in ImageMagick is vulnerable to remote denial of service, allowing a remote attacker to crash the process. The description in the initial document confirms a DoS via the png coder, and connected sources reiterate the same CVE with no additional exploit details. The p...

CVE-2014-9844

CVE-2014-9844 affects ImageMagick 6.8.9.9, where the ReadRLEImage function in coders/rle.c is vulnerable. A crafted image file can trigger an out-of-bounds read, enabling a remote denial of service. The vulnerability is tied to processing of RLE-encoded data within ImageMagick. The provided conne...

CVE-2014-9842

CVE-2014-9842 affects ImageMagick 6.8.9.9, where a memory leak in the ReadPSDLayers function (coders/psd.c) can allow remote attackers to cause a denial of service via memory consumption. The vectors are unspecified in the provided description. No explicit exploitation details or patch/remediatio...

CVE-2014-9850

CVE-2014-9850 describes a logic error in ImageMagick 6.8.9.9 that can allow remote attackers to cause a denial of service through resource consumption. The provided documents do not include further technical details (e.g., vulnerable component specifics, affected versions beyond 6.8.9.9, or expli...