PT-2023-3100 · D Link · D-Link Dir-842

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue allows attackers to execute arbitrary commands via importing a crafted file. This is related to the lack of data cleaning measures at the management level, which can be exploited by a remo...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

DEBIAN-CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

UBUNTU-CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

Memory corruption

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

PT-2023-2954 · Cscape · Cscape

Name of the Vulnerable Software and Affected Versions: Cscape versions affected versions not specified Description: The issue is related to the lack of proper validation of user-supplied data when parsing project files, such as CSP. This can lead to an out-of-bounds read in Cscape, potentially...

PT-2023-2952 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation Cscape affected versions not specified Description: The issue is related to an out-of-bounds write in memory due to a lack of proper validation of user-supplied data when parsing project files, such as HMI files. This could...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

EyouCMS 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.2, which originated from allowing an attacker to execute arbitrary commands by uploading a carefully...

Yank Note 安全漏洞

Yank Note is a highly extensible Markdown editor by purocean individual developers in China. A security vulnerability exists in Yank Note v3.52.1, which allows users to execute arbitrary code by opening a specially crafted file...

GLSA-202305-26 : LibreCAD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-26 LibreCAD: Multiple Vulnerabilities - A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

CVE-2023-30333

An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...

Tenable Nessus 10.x < 10.4.2 Privilege Escalation Vulnerability (TNS-2023-01)

Tenable Nessus is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus";...

The vulnerability of the ParseMetaGeometry() function in the MagickCore/geometry.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphics editor is related to an incorrect implementation of the division operation. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a...

The vulnerability of the IMA_ADPCMDecode() function in the audio component of the SDL_wave.c multimedia library allows a hacker to induce a service failure.

The vulnerability of the IMAADPCMDecode function in the audio component of the SDLwave.c multimedia library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability in the MagickCore/statistic.c component of the console-based image editing tool ImageMagick allows a hacker to induce a service failure.

The vulnerability of the MagickCore/statistic.c component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...