CVE-2024-23313

An integer underflow vulnerability exists in the sopenFAMOSread functionality of The Biosig Project libbiosig 2.5.0 and Master Branch ab0ee111. A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a maliciou...

CVE-2024-55074

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370...

Vitest WebSocket RCE

The vulnerability of the WebSocket protocol implementation in the software testing tool Vitest is related to the lack of authentication for the communication source. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file...

USN-7249-1 libvpx vulnerability

Xiantong Hou discovered that libvpx would overflow when attempting to allocate memory for very large images. If an application using libvpx opened a specially crafted file, a remote attacker could possibly use this issue to cause the application to crash, resulting in a denial of service, or the...

CVE-2025-24336

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...

CVE-2025-24336

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...

CVE-2025-24336: Improper Handling of Structural Elements

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...

PT-2025-5334 · Unknown · Sxf Common Library

Name of the Vulnerable Software and Affected Versions: SXF Common Library affected versions not specified Description: The SXF Common Library improperly handles input data. If a product using the library reads a crafted file, it may cause the product to crash. Recommendations: At the moment, ther...

SXF Common Library 安全漏洞

SXF Common Library is a common library in the SXF Common Library open source. A security vulnerability exists in SXF Common Library that stems from mishandling of input data and may cause a crash if a product using the library reads a carefully crafted file...

PT-2025-1943 · National Instruments · Ni Vision Builder Ai +1

Name of the Vulnerable Software and Affected Versions: NI Vision Builder AI affected versions not specified NI Vision Development Module affected versions not specified Description: The issue is related to the use of a third-party library for image processing in NI's vision software, which expose...

CVE-2024-12740: Dependency on Vulnerable Third-Party Component

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

Adobe Bridge Integer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager arises from a loss of precision for a whole number. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Adobe Premiere Pro Buffer Overflow

The vulnerability of the professional video editing software Adobe Premiere Pro stems from buffer overflows in the queue. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Adobe Framemaker Buffer Overflow

The vulnerability of the desktop publishing system Adobe Framemaker arises from an overflow in the buffer of the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Clam Antivirus OLE2 DoS

The vulnerability of the OLE2 form file analysis component in the Clam Antivirus antivirus program lies in the overflow of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file...

CVE-2024-53588

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...

UBUNTU-CVE-2025-20128

A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buff...

dotnet: .NET and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...