14508 matches found
CVE-2024-33335
SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...
PT-2024-25209 · H3C · H3C Seasql Dws
Name of the Vulnerable Software and Affected Versions: H3C SeaSQL DWS version 2.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted file. This is a result of a SQL Injection vulnerability in the H3C SeaSQL DWS product. Recommendations: For H3C SeaSQL DWS...
CVE-2024-33335
A SQL Injection vulnerability exists in H3C SeaSQL DWS version 2.0 , a distributed analytic database. This flaw allows a remote attacker to execute arbitrary code by providing a crafted file . As a temporary workaround, it is recommended to restrict access to the system and avoid using files that...
CVE-2024-33335
SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...
CVE-2024-33335: Improper Control of Generation of Code
SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...
PT-2024-5552 · Tencent +4 · Rapidjson +4
Name of the Vulnerable Software and Affected Versions: Tencent RapidJSON affected versions not specified Description: The issue is related to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. This can be exploited b...
BIT-GITLAB-2024-1495 Uncontrolled Resource Consumption in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...
CVE-2024-20753
Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...
CVE-2024-20753 Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...
CVE-2024-20753
Adobe Photoshop Desktop (Windows/macOS) is affected by CVE-2024-20753, an out-of-bounds read in PDF/file parsing that could allow code execution in the context of the current user. Affected versions include 24.7.3, 25.7 and earlier; exploitation requires the user to open a crafted file. Several c...
CVE-2024-31777
The GUnet OpenEclass e-learning platform (versions 3.15 and earlier ) is vulnerable to an unrestricted file upload vulnerability via the certbadge.php endpoint. An authenticated attacker with administrative privileges can exploit this flaw by using the ZIP functionality to upload crafted files, l...
CVE-2024-20753: Out-of-bounds Read
Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...
Adobe Photoshop Buffer Error Vulnerability
Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used to process images. A buffer error vulnerability exists in Adobe Photoshop Desktop, which arises from an out-of-bounds read vulnerability when parsing a carefully crafted...
CVE-2024-1495
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...
UBUNTU-CVE-2024-1495
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...
CVE-2024-1495
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...
CVE-2024-1495 Uncontrolled Resource Consumption in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...
GitLab CE/EE Security Vulnerabilities
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE, which stems from the possibility that...
PT-2024-4225 · Adobe · Audition
Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.2, 23.6.4 and earlier Description: The issue is related to NULL Pointer Dereference errors. Exploitation of this issue could allow an attacker to cause a denial-of-service condition by crashing the application. This...