AppleGraphicsControl macOS Code Execution

The vulnerability of the AppleGraphicsControl component in the macOS Sonoma operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

AppleGraphicsControl macOS Code Execution

The vulnerability of the AppleGraphicsControl component in the macOS Sonoma operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Directory Traversal

mlflow is vulnerable to Directory Traversal. The vulnerability exists in the validatepathissafe function within uri.py which allows an attacker to read or write to files outside of the restricted directory using a crafted file path...

CVE-2023-6315

Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

CVE-2023-6314

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

Updated audiofile packages fix a security vulnerability

2 patches are added to audiofile source to correct a vulnerability. In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file. CVE-2019-13147...

Adobe Illustrator Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory when processing JP2 format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created file...

Microsoft Office Microsoft 365 Apps for Enterprise Data Access

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by opening a specially create...

Adobe InDesign Pointer Error DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure by opening a specially created file...

Adobe InDesign Buffer Overflow Info Disclosure

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file...

Adobe Illustrator Buffer Overflow RCE

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created file...

DEBIAN-CVE-2023-49343

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...

CVE-2023-47074

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47074

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

Design/Logic Flaw

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

GHSA-7J69-QFC3-2FQ9 Ansible template injection vulnerability

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

CVE-2023-47074: Out-of-bounds Read

Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

AZL-32158 CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...