12812 matches found
PT-2024-9963 · Unknown · Express Web Client
Name of the Vulnerable Software and Affected Versions: eXpress web client affected versions not specified Description: The issue is caused by insufficient protection of the web page structure in the document viewer library of the eXpress web client. This allows a remote attacker to execute...
CVE-2022-44517
Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...
CVE-2024-8058
An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading...
CVE-2024-8058
CVE-2024-8058 concerns the FileZ client and describes an improper parsing vulnerability where a crafted file in the FileZ directory can lead to reading arbitrary files on the device via URL preloading. Affected software: FileZ client. Root cause: improper parsing related to URL preloading. Impact...
PT-2024-38779 · Unknown · Filez Client
Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper parsing issue in the FileZ client could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading. This issue might permit...
The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Access database management systems, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of the File Upload mechanism in the Apache Struts software framework allows a hacker to execute arbitrary code.
The vulnerability of the File Upload mechanism in the Apache Struts software platform is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that a specially crafted malicious file is...
The vulnerability of Ollama’s system for running and managing large language models, related to out-of-memory reading, allows a perpetrator to trigger a service failure.
The vulnerability of the Ollama system for running and managing large language models is related to memory-bound reading. Exploiting this vulnerability could allow a malicious actor to trigger a service disruption segmentation attack through the use of a specially created file...
PT-2024-9424 · Microsoft · Access +1
Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to a memory use after free vulnerability in Microsoft Access, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicio...
PT-2024-9947 · Adobe · Substance3D - Modeler
Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.14.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...
The vulnerability of the Arena software for modeling and automating discrete events lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the Arena software for modeling and automating discrete events relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted DOE file...
Nav2 安全漏洞
Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that originates from the nav2amcl process containing a buffer overflow. An attacker exploiting the vulnerability can be triggered by sending a carefully crafted .yaml file...
Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack Overflow Code Execution Vulnerability
Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments developed by Fuji Electric Japan for collecting real-time data from PLCs, temperature controllers, inverters and other devices. Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack Overflow...
CVE-2024-53564
A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded valid FreePBX module files, allowing high-privilege administrators to insert unwanted files. NOTE: the Supplier's position is that there is no risk beyond what high-privilege administrators are...
CVE-2024-53564
The CVE concerns FreePBX 17.0.19.17 where uploaded file types are not validated, enabling high-privilege administrators to insert unwanted files. Root cause: lack of file-type validation in the upload flow of FreePBX modules. Potential impact: remote code execution is stated in one source, but ot...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in FFmpeg parseoptions, which can be exploited by an attacker to submit a special file and trick the user into parsing it, which can crash the...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in the “cull” mechanism, allows attackers to execute arbitrary code within the context of the current user.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to the overflowing buffer in the “cull” area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in the “cull” mechanism, allows attackers to execute arbitrary code within the context of the current user.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to an overflow in the “bucket” buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...
