17 matches found
CVE-2026-33035
creationtimestamp| type| source ---|---|--- 2026-03-16 13:03:01+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-wfq5-qgqp-hvhv 2026-03-20 06:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhweab2q22o...
CVE-2025-33035
CVE-2025-33035 concerns a path traversal vulnerability in QNAP File Station 5 . The issue allows a remote attacker who has a user account to read unexpected files or system data. Affected version range is File Station 5 prior to 5.5.6.4847 ; the vulnerability is mitigated by upgrading to 5.5.6.48...
CVE-2025-33035 File Station 5
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5...
CVE-2024-33035
creationtimestamp| type| source ---|---|--- 2024-09-02 14:42:53+00:00| seen| https://t.me/cvedetector/4616...
CVE-2024-33035 Integer Overflow or Wraparound in Display
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...
CVE-2024-33035 Integer Overflow or Wraparound in Display
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...
CVE-2023-33035
Memory corruption while invoking callback function of AFE from ADSP...
CVE-2023-33035 Buffer Copy Without Checking Size of Input in Audio
Memory corruption while invoking callback function of AFE from ADSP...
CVE-2023-33035
CVE-2023-33035 describes memory corruption in Qualcomm components when invoking the AFE callback from the ADSP. Affected software is the Audio Front End (AFE) within Qualcomm ADSP environments; the root cause is memory corruption on callback handling. The CVE is rated HIGH for confidentiality, in...
CVE-2022-33035
creationtimestamp| type| source ---|---|--- 2022-06-29 17:23:29+00:00| seen| https://t.me/cibsecurity/45362...
CVE-2022-33035
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
CVE-2022-33035
CVE-2022-33035 affects NetSarang XLPD v7.0.0094 and earlier. The root cause is an unquoted service path that can be exploited by a local attacker to start a process with elevated privileges, resulting in local privilege escalation. Multiple sources in the connected set corroborate the same descri...
KLA12404 Multiple vulnerabilities in OpenOffice
Multiple vulnerabilities were found in OpenOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability can be exploited vi...
CVE-2021-33035
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...
CVE-2021-33035 Buffer overflow from a crafted DBF file
Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...
CVE-2021-33035
CVE-2021-33035 describes a buffer overflow in Apache OpenOffice when reading DBF files: the size of certain DBF fields isn’t checked, causing overflow of allocated space and potential arbitrary code execution via stack manipulation. Affected products: Apache OpenOffice up to and including 4.1.10....
CVE-2021-33035
creationtimestamp| type| source ---|---|--- 2021-09-22 17:36:48+00:00| published-proof-of-concept| https://t.me/cKure/7240 2021-10-01 11:01:01+00:00| seen| https://t.me/CyberSecurityTechnologies/4416 2024-05-14 02:37:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/432...