|
256071
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-13141
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256072
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a P…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-13140
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256073
|
9.8 |
CRITICAL
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-13139
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256074
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted fi…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-13134
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256075
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2017-13133
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256076
|
7.5 |
HIGH
Network
|
bitcoin
|
bitcoin_core
|
Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attac…
|
CWE-20
Improper Input Validation
|
CVE-2017-12842
|
2024-11-21 12:10 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256077
|
8.8 |
HIGH
Network
|
mersive
|
solstice_firmware
|
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.
|
CWE-78
OS Command
|
CVE-2017-12945
|
2024-11-21 12:10 |
2019-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256078
|
7.5 |
HIGH
Network
|
open-xchange
|
open-xchange_appsuite
|
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.
|
CWE-200
Information Exposure
|
CVE-2017-12884
|
2024-11-21 12:10 |
2019-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256079
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
|
CWE-79
Cross-site Scripting
|
CVE-2017-12885
|
2024-11-21 12:10 |
2019-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256080
|
9.8 |
CRITICAL
Network
|
openmrs
|
openmrs-module-htmlformentry
|
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).
|
CWE-20
Improper Input Validation
|
CVE-2017-12795
|
2024-11-21 12:10 |
2019-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|