CVE-2023-27164

An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file...

Heap Buffer Overflow

libde265.so is vulnerable to Heap Buffer Overflow. The vulnerability exists due to the lack of validation in image.cc. which allows an attacker to cause an application crash by parsing a crafted file...

Denial Of Service (DoS)

libde265.so is vulnerable to Denial Of Service DoS. The vulnerability is due to a null pointer dereference in theputweightedpredavg function of motion.cc, which allows an attacker to cause an application crash by parsing a crafted file...

Denial Of Service (DoS)

libde265.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a NULL pointer dereference in the putunweightedpred16fallback function of motion.cc, which allows an attacker to cause an application crash by parsing a crafted file...

Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious file...

Medium: ImageMagick

Issue Overview: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file,...

Directory traversal

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

Cross site scripting

A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...

CVE-2023-22856 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...

PT-2023-18731 · Unknown · Blogengine.Net

Name of the Vulnerable Software and Affected Versions: BlogEngine.NET version 3.3.8.0 Description: A stored Cross-site Scripting XSS issue allows the injection of arbitrary JavaScript in the security context of a blog visitor through the upload of a specially crafted file. Recommendations: For...

DOPSoft Buffer Overflow

The vulnerability of the DOPSoft software, designed for programming operator panels by Delta Electronics, is due to buffer overflow on the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

BlogEngine cross-site scripting vulnerabilities

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments, custom themes and so on. A security vulnerability exists in BlogEngine.NET version 3.3.8.0. An attacker exploited the vulnerability to inject arbitrary JavaScript into a blog visitor's secure environment by...

Medium: ImageMagick

Issue Overview: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file,...

Microsoft Word Buffer Overflow

The vulnerability of Microsoft Word relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by opening a specially created file...

Debian debian-goodies injection vulnerability

debian Debian GUN/Linux is a Linux operating system from the Debian community in the United States. The system has faster and easier memory management, open source software support, good system security, and high stability. A security vulnerability exists in debian-goodies version 0.88.1, which...

CVE-2022-45988

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload...

CVE-2022-45988

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload...

Privilege escalation

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload...

Denial Of Service (DoS)

libde265.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a NULL pointer dereference in the mcchroma function in motion.cc which allows an attacker to cause an application crash by passing a crafted file...