Skip to content
OpenAdvisories

Archive

12 November 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width…

  • Unscored —

    In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file e…

  • Unscored —

    In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to …

  • Unscored —

    In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows r…

  • Unscored —

    The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote a…

  • Unscored —

    The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-…