Skip to content
OpenAdvisories

Archive

18 August 2019

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Critical 9.8

    Double Free in Adplug

    AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.

  • Unscored —

    core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a …

  • Unscored —

    The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…

  • Unscored —

    coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…

  • Unscored —

    WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …

  • Unscored —

    In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (applicatio…

  • Unscored —

    In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhausti…

  • Unscored —

    In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-s…

  • Unscored —

    DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by …

  • Unscored —

    GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.

  • Unscored —

    GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.

  • Unscored —

    GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.

  • Unscored —

    The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any …

  • Unscored —

    The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all …

  • Unscored —

    The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (i…

  • Unscored —

    The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote particip…

  • Unscored —

    The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the c…