snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

CVE-2022-45771

An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file...

PT-2022-5761 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft Edge and Google Chrome browsers, stemming from inadequate protection of web page structure. This could...

CVE-2022-44354

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file...

snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash, resulting in a denial of service...

CVE-2022-4141

A heap-based buffer overflow vulnerability was found in Vim due to invalid memory access. This issue could allow an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly executing code and corrupting memory...

The vulnerability of the Windows operating system’s Fax Service allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s Fax Service exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Windows Graphics component of the Windows operating system allows a hacker to gain unauthorized access to the device.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to the device through a specially created file...

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office programs lies in the lack of protection for sensitive data, allowing attackers to gain unauthorized access to devices.

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office packages is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to a device through a specially created file...

Vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Excel, and Microsoft Office packages, due to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Excel, and Microsoft Office exists due to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code using a specially created file...

The vulnerability of the TIFFReadRGBATileExt() function in the LibTIFF library, related to integer overflow, allows attackers to cause a service failure.

The vulnerability of the TIFFReadRGBATileExt function libtiff/tifgetimage.c in the LibTIFF library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created file...

Ubuntu 16.04 ESM / 18.04 LTS : ImageMagick vulnerabilities (USN-5736-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5736-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using...

The vulnerability of the ExportIndexQuantum() function in the ImageMagick graphic editor allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ExportIndexQuantum function in the ImageMagick graphics editor is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code using a specially created file...

The vulnerability of the Dict::find() function in the Dict.cc component of the Poppler PDF handling library allows a attacker to cause a service failure.

The vulnerability of the Dict::find function in the Dict.cc component of the Poppler PDF handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created PDF file...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server, which stems from the lack of data protection measures, allows attackers to gain unauthorized access to devices.

The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized acce...

IBM i 代码问题漏洞

IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i Access Family versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0, which stems from a vulnerability that could allow a...