CVE-2020-28840

CVE-2020-28840 affects Matthias-Wandel jhead v3.04. The vulnerability is a buffer overflow in jpgfile.c that allows local attackers to execute arbitrary code and cause a DoS. The provided connected sources consistently report the same description; no concrete patch/version remediation is document...

CVE-2020-28840

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service DoS...

CVE-2020-28840

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service DoS...

CVE-2023-28840 vulnerabilities

Vulnerabilities for packages: bom, up, ko, ctop, apko, helm, melange...

CVE-2023-28840 vulnerabilities

Vulnerabilities for packages: melange, apko, ctop, helm, up, ko, bom...

CVE-2023-28840

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

CVE-2023-28840

CVE-2023-28840 affects Moby/dockerd with Swarm overlay networks (VXLAN) in encrypted mode. The vulnerability stems from how iptables rules (using xt_u32) enforce IPSec for encrypted overlays; admin firewall rules can override Moby’s, potentially allowing unencrypted traffic, and arbitrary Etherne...

CVE-2023-28840

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

CVE-2022-28840

creationtimestamp| type| source ---|---|--- 2022-06-16 00:19:40+00:00| seen| https://t.me/cibsecurity/44567...

Adobe Bridge Multiple Vulnerabilities (APSB22-25) - Mac OS X

The host is missing an important security update according to Adobe June update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-28840 Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 12.0.1 and earlier versions is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-28840

Adobe Bridge (version 12.0.1 and earlier) is affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Root cause: an out-of-bounds write in the handling of certain files. Impact: high risk of remote code execution if a user ope...

Adobe Bridge 12.x < 12.0.2 Multiple Vulnerabilities (APSB22-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 12.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-25 advisory. - Adobe Bridge version 12.0.1 and earlier versions is affected by a Use-After-Free vulnerability that coul...

CVE-2021-28840

CVE-2021-28840 targets multiple D-Link DAP access points (DAP-2310, -2330, -2360, -2553, -2660, -2690, -2695, -3320, -3662). The root cause is a NULL pointer dereference in the upload_config function of sbin/httpd: when handling a specific HTTP GET, upload_file is NULL and strncasecmp is called w...

CVE-2021-28840

Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the uploadconfig function of sbin/httpd binary...