Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from the American company Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A security vulnerability exists in Autodesk Design Review version...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from the American company Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A security vulnerability exists in Autodesk Design Review version...

Vulnerabilities fixed in Oracle Siebel CRM

Vulnerabilities have been fixed in Oracle Siebel CRM. The vulnerabilities allow a malicious party to conduct attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Oracle has fixed vulnerabilities in the...

SUSE SLED15: exiv2 / exiv2-lang / libexiv2-26 / libexiv2-26-32bit / etc (SUSE-SU-2022:3598-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3598-1 advisory. - CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure...

Security Bulletin: IBM Sterling File Gateway is vulnerable to multiple issues due to Bouncy Castle

Summary IBM Sterliing File Gateway has addressed multiple security vulnerabilities in Bouncy Castle. Vulnerability Details CVEID:CVE-2016-1000343 DESCRIPTION: Bouncy Castle JCE Provider could provide weaker than expected security, caused by a flaw in the DSA key pair generator. A remote attacker...

USN-5681-1: gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18718 It was discovered that gThumb did not properly manage...

Ubuntu: Security Advisory (USN-5675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: XL compilers on AIX are vulnerable to denial of service due to zlib and zlibNX (CVE-2018-25032)

Summary A vulnerability in zlib and zlibNX could allow a remote attacker to cause a denial of service CVE-2018-25032. XL compilers on AIX use zlib and zlibNX as part of its data compression functions. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

USN-5675-1: Heimdal vulnerabilities

Isaac Boukris and Andrew Bartlett discovered that Heimdal's KDC was not properly performing checksum algorithm verifications in the S4U2Self extension module. An attacker could possibly use this issue to perform a machine-in-the-middle attack and request S4U2Self tickets for any user known by the...

USN-5675-1 heimdal vulnerabilities

Isaac Boukris and Andrew Bartlett discovered that Heimdal's KDC was not properly performing checksum algorithm verifications in the S4U2Self extension module. An attacker could possibly use this issue to perform a machine-in-the-middle attack and request S4U2Self tickets for any user known by the...

CVE-2018-25032 affecting package mariadb 10.3.35-1

CVE-2018-25032 affecting package mariadb 10.3.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-18447

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data issue 2 of 2...

CVE-2018-18447

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data issue 2 of 2...

TerraMaster Operating System Command Injection (CVE-2018-13358)

A command injection vulnerability exists in Terra Master. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2018-18446

Paint.NET (dotPDN) before version 4.1.2 is affected by CVE-2018-18446 due to Deserialization of Untrusted Data. The issue affects Paint.NET software prior to 4.1.2; the root cause is not detailed beyond the deserialization flaw. The CVSS metrics indicate a CRITICAL impact across confidentiality, ...

CVE-2018-18447

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data issue 2 of 2...

iCMS Article SQL Injection (CVE-2018-12888)

An SQL injection vulnerability exists in iCMS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2018-18446

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data issue 1 of 2...

Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2022-2598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-18447

CVE-2018-18447 affects Paint.NET (dotPDN Paint.NET) before version 4.1.2. The issue is a deserialization of untrusted data vulnerability (root cause described as deserialization flaw). CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and impact on confidentiali...