PT-2024-22870 · Addactis · Addactis Ibnrs

Name of the Vulnerable Software and Affected Versions: Addactis IBNRS version 3.10.3.107 Description: The issue allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to the Project Description, Identifiers, Custom Triangle Name inside Input Triangles, and Yield Curve Name...

CVE-2024-29375

Addactis IBNRS v3.10.3.107 is affected by a CSV Injection vulnerability that lets an attacker craft a .ibnrs file to inject content into Project Description, Identifiers, Custom Triangle Name, and Yield Curve Name, enabling remote arbitrary code execution. The CVSS 3.1 base score is 9.8 (CRITICAL...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerabilities stem from flaws in the VZT vztrdgetfacname decompression functionality in .vzt file, allowing arbitrary code execution via a specially crafted file...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A security vulnerability exists in Foxit PDF Reader AcroForm, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A code execution vulnerability exists in Foxit PDF Reader Doc Object, which can be exploited by an attacker to submit a special file request that induces the user to parse it, which can crash the...

The vulnerability of the Arena Simulation software in terms of modeling and automating discrete events lies in its memory management after it is freed. This allows a hacker to execute arbitrary code.

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the specified buffer limit. This allows attackers to disclose sensitive information or cause the application to terminate abnormally.

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the ability to read data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause the application to terminate abnormally using...

LeptonCMS 安全漏洞

LeptonCMS is a content management system CMS from the Lepton Project. A security vulnerability exists in LeptonCMS version v.7.1.0, which originates from a vulnerability that could allow an authenticated, remote attacker to execute arbitrary code by uploading a crafted PHP file...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A code execution vulnerability exists in Foxit PDF Reader AcroForm, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the...

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the use of an uninitialized pointer on the stack, which allows a hacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability allows a attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility...

Heap Based Buffer Overflow

gtkwave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderIterBlocks2 chaintable parsing functionality using the chaintable of the FSTBLVCDATADYNALIAS2, allowing attackers to execute arbitrary code by crafting a specially crafted...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient validation of array indexes, specifically in the tdelta indexing when signallens is 0. A specially crafted .fst file can exploit these vulnerabilities to execute arbitrary code when opened by a victim...

Updated aide & mhash packages fix security vulnerability

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow. CVE-2021-45417...

CVE-2024-28713

An issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a crafted file to the theme management feature...

Mblog 安全漏洞

langhsu mblog is langhsu open source an application system . Open source Java blog system , support for multi-user , support for switching themes . Mblog v.3.5.0 version has a security vulnerability . Attackers use the vulnerability through a specially crafted file on the theme management functio...

PT-2024-22533

Name of the Vulnerable Software and Affected Versions Mblog Blog system version 3.5.0 Description An issue in the theme management feature allows an attacker to execute arbitrary code via a crafted file. Recommendations For Mblog Blog system version 3.5.0, consider disabling the theme management...

CVE-2024-28713

CVE-2024-28713 affects Mblog Blog system v3.5.0. A vulnerability in the theme management feature allows an attacker to execute arbitrary code by supplying a crafted file. The issue is confirmed across multiple sources (Red Hat, CVE listings) and is rated as highly severe (CVSS v3.1: 9.8, Critical...

CVE-2024-28713

An issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a crafted file to the theme management feature...

CVE-2023-46049

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...