CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

Microsoft Visual Studio Privilege Escalation

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

3D viewer Code Execution

The vulnerability of the 3D viewer software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

Microsoft Excel Sensitive Data Access

The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening a specially created file...

PT-2023-5060 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass existing security restrictions using a specially crafted file. Recommendations: At the moment,...

PT-2023-5061 · 3D Viewer · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer affected versions not specified Description: The issue is related to insufficient input validation in the 3D Viewer, which can be exploited to execute arbitrary code using a specially crafted file. Recommendations: At the moment,...

PT-2023-5094 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to elevate their privileges using a specially crafted file. Recommendations: ...

CVE-2022-28832

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

CVE-2022-28832

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

Design/Logic Flaw

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

CVE-2022-28832: Out-of-bounds Read

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

func.sjw File Copy Buffer Overflow DoS

The vulnerability of the filecopystr function in func.sjw, a utility for determining the type of given files, involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...