CVE-2015-8896

Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.

Source: CVE-2015-8896

CVE-2015-8895

Integer overflow in coders/icon.c in Imagemagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.

Source: CVE-2015-8895

CVE-2017-5937

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.

Source: CVE-2017-5937

CVE-2017-6914 (bigtree_cms)

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.

Source: CVE-2017-6914 (bigtree_cms)

CVE-2017-6916 (bigtree_cms)

CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.

Source: CVE-2017-6916 (bigtree_cms)

CVE-2017-6918 (bigtree_cms)

CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.

Source: CVE-2017-6918 (bigtree_cms)

CVE-2017-6917 (bigtree_cms)

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.

Source: CVE-2017-6917 (bigtree_cms)

CVE-2017-6915 (bigtree_cms)

CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed.

Source: CVE-2017-6915 (bigtree_cms)

CVE-2017-6917

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.

Source: CVE-2017-6917

CVE-2017-6916

CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.

Source: CVE-2017-6916