12829 matches found
GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
The vulnerability of the file_copystr function in func.sjw allows a attacker to cause a service failure.
The vulnerability of the filecopystr function in func.sjw, a utility for determining the type of given files, involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...
CVE-2023-41564
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
Oracle Linux 8 : GStreamer, / libmad, / and / SDL (ELSA-2020-1631)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1631 advisory. - Fixes CVE-2018-7263 - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit functions in video/SDLblit.c Tenable has extracted the preceding...
The vulnerability of the require_once component in the PHP-Fusion CMS system allows a hacker to execute arbitrary code.
The vulnerability of the requireonce component in the PHP-Fusion CMS system relates to the ability to implement functionality from an untrusted management environment. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially crafted php file...
Medium: php56-pecl-imagick
Issue Overview: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability th...
Medium: php55-pecl-imagick
Issue Overview: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability th...
Medium: php72-pecl-imagick
Issue Overview: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability th...
ClamAV 1.x < 1.0.2 DoS
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability ...
CVE-2023-39703
A cross site scripting XSS vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file...
CVE-2023-41638
An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file...
The vulnerability of the Utf8_16_Read::convert function in the Notepad++ text editor allows a hacker to execute arbitrary code.
The vulnerability of the Utf816Read::convert function in the Notepad++ text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by having the user open a specially crafted file...
The vulnerability of the /libyasm/intnum.c and /elf.c components of the Yasm assembler allows a hacker to trigger a service failure.
The vulnerability in the components /libyasm/intnum.c and /elf/elf.c of the Yasm assembler is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure through the created file...
The vulnerability of Adobe Acrobat Reader PDF viewer and editor programs relates to the occurrence of out-of-buffer operations in memory, which allows attackers to disclose protected information.
The vulnerability of Adobe Acrobat Reade PDF viewer and editor programs relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory-related issues, allowing attackers to exploit these vulnerabilities to disclose protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the memory limit. Exploiting these vulnerabilities can allow attackers to disclos...
GNU Binutils read_and_display_attr_value function null pointer dereference vulnerability
GNU Binutils is a set of tools for working with binary files. GNU Binutils suffers from a null pointer dereference vulnerability that stems from a null pointer dereference in the readanddisplayattrvalue function in the dwarf.c file in the readelf tool. An attacker could use this vulnerability to...
Exiv2 buffer overflow vulnerability (CNVD-2023-68223)
Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory. It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into...
DEBIAN-CVE-2023-39615
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support...