Vulnerability of SNC_io parser<EW>::read_sedge() and seh->snext() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: The function readsedge in the NefS2/SNCio parser component relies on the snext function from the CGAL algorithm library. This vulnerability is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Vulnerability of the SNC_io parser function <EW>: read_edge(), eh->incident_sface() in the Nef_S2/SNC_io parser.h component. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function lies in the use of readedge and eh-incidentsface functions. This vulnerability is associated with unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even caus...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-0101

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host...

CVE-2023-0101

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_face(). This component is part of the Nef_2/PM_io parser library, a library of computational geometry algorithms (CGAL). It allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMioparser function is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is present in the...

PT-2023-7929 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus versions 8.10.1 through 8.15.8 Nessus versions 10.0.0 through 10.4.1 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to elevate privileges to root or NT AUTHORITY/SYSTEM o...

openSUSE 15 Security Update : podofo (SUSE-SU-2022:3833-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3833-1 advisory. - CVE-2018-12983: Fixed a stack overrun bsc1099719. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that...

[R1] Nessus Version 8.15.8 Fixes One Vulnerability

R1 Nessus Version 8.15.8 Fixes One Vulnerability Arnie Cabral Wed, 01/18/2023 - 12:13 A privilege escalation vulnerability was identified in Nessus versions 8.15.7 and earlier. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM...

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the import function of the administrative interface module of Cisco Firepower Management Center software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the import function of the administrative interface module of Cisco Firepower Management Center FMC is related to insufficient validation of XML files’ syntax. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through ...

Integer overflow

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...

snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

The vulnerability of the Adobe Acrobat DC PDF editing program, related to writing data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Acrobat DC PDF editing program relates to data writing beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to reading beyond the buffer in memory, allow attackers to gain unauthorized access to information.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to information through a specially...

The vulnerability of Adobe InCopy, a text creation and editing software, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

The vulnerability of Adobe Dimension’s 3D design software relates to memory management after it is freed. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...