CVE-2023-35950

Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsibl...

CVE-2024-32944

The Japanese open source song synthesizer UTAU (versions prior to v0.4.19 ) is vulnerable to a path traversal (CWE-22) flaw. If a user installs a crafted voicebank installer, such as a .uar or .zip file, an attacker can cause an arbitrary file to be placed on the system. To mitigate this risk, us...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

Omron CX-Programmer Buffer Overflow DoS

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or expose sensitive information through a specially...

Denial Of Service (DOS)

Wireshark is vulnerable to Denial Of Service DOS. The vulnerability is caused due to memory handling issue which can be exploited to mount Denial Of Service DOS via crafted capture file...

CVE-2024-30280

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

inxedu 安全漏洞

Inxedu inxedu is a set of open source online education platform from China's Inxu Times Inxedu company. The platform includes an online school system, a live streaming system, an exam system and a marketing website. A security vulnerability exists in inxedu v2024.4. An attacker can exploit the...

CVE-2024-30280: Out-of-bounds Read

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2024-20261

A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This vulnerability exists because of a...

CVE-2024-35060

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

CVE-2024-34952

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...

CVE-2024-34953

An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service DoS via memory exhaustion by supplying a crafted .ncm file...

CVE-2024-34953

An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service DoS via memory exhaustion by supplying a crafted .ncm file...

CVE-2024-34953

The taurusxin ncmdump software (version v1.3.2 ) is vulnerable to a Denial of Service (DoS) attack due to uncontrolled resource consumption (CWE-400). An attacker can trigger memory exhaustion by providing a specifically crafted .ncm file . To mitigate this risk, users of version 1.3.2 should avo...

CVE-2024-34952

taurusxin ncmdump version v1.3.2 is vulnerable to a segmentation violation (NULL pointer dereference) within the NeteaseCrypt::FixMetadata() function located at /src/ncmcrypt.cpp. An attacker can exploit this flaw by providing a crafted .ncm file to trigger a Denial of Service (DoS) . As a tempor...

Foxit PDF Reader ComboBox Code Execution

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

Foxit PDF Reader ComboBox Code Execution

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

CVE-2024-34982

An arbitrary file upload vulnerability in the component /include/file.php of lylmespage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information by opening a specially created file...

Adaptive Substance 3D Painter Buffer Overflow

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...