libtiff: Out-of-bounds Read error in tiffcp

A heap buffer overflow flaw was found in Libtiffs' cpContigBufToSeparateBuf function of the tiffcp.c file. This flaw allows an attacker with a crafted TIFF file to trigger a heap out-of-bounds read access issue, causing a crash that leads to a denial of service...

PT-2022-5507 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected...

PT-2022-5468 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, which can be exploited by remote attackers to execute arbitrary code. This can be...

PT-2022-5509 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue exists due to insufficient input validation in Microsoft Visual Studio, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

PT-2022-5494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows GDI+ interface, which can allow an attacker to gain unauthorized access to protected information using a...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...

PT-2022-5641 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Description: The issue is related to a lack of...

PT-2022-5640 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS GUIX Studio development environment. Exploitation of this issue may allow an attacker to execute...

PT-2022-5647

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft Office versions affected versions not specified Description The issue exists due to insufficient inpu...

CVE-2022-43359

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...

Amazon Linux 2022 : xz, xz-devel, xz-libs (ALAS2022-2022-187)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-187 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's...

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in upx PackLinuxElf::canUnpack in plxelf.cpp which allows attackers to execute arbitrary code and cause a denial of service via a crafted file...

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to an assertion abort in upx MemBuffer::alloc in mem.cpp which allows attackers to cause a denial of service abort via a crafted file...

CVE-2022-43235

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputhevcepelpixels8sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2689)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2657)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

Vehicle Booking System 代码问题漏洞

Vehicle Booking System is a vehicle booking system. A file upload vulnerability exists in Vehicle Booking System v1.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted php file...

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a hacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of the Adobe Photoshop graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Adobe InCopy text creation and editing software, related to reading beyond the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...