CVE Feed

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.

Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file.

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

This candidate is unused by its CNA.

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted .asf file.

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.

This candidate is unused by its CNA.