12842 matches found
CVE-2022-3016
A heap use-after-free vulnerability was found in vim's getnextvalidentry function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file,...
OESA-2022-1885 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to...
UBUNTU-CVE-2020-35530
In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service.The vulnerability exists in the TIFFClose function in tiffcrop.c due to invalid pointer free operation which allows an attacker to crash the system via a maliciously crafted file...
In GNU Binutils before 2.40 there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.
...
CVE-2022-36580
CVE-2022-36580 affects Online Ordering System v2.3.2 via the /admin/products/controller.php?action=add component, enabling arbitrary code execution through an crafted PHP file due to an arbitrary file upload vulnerability. Public sources in the connected documents reiterate the exact vulnerable c...
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
UBUNTU-CVE-2022-1354
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook arises from buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the IBM i2 Analyst’s Notebook visual analysis tool arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created file...
The vulnerability of the Horner Automation Cscape EnvisionRV software lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Horner Automation Cscape EnvisionRV software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2022-4526 · Omron · Cx-One
Name of the Vulnerable Software and Affected Versions: CX-One affected versions not specified Description: The issue is related to a use-after-free vulnerability in the CX-Programmer development environment, part of the CX-One software suite used for programming and configuring Omron PLCs. This...
The vulnerability of the extractImageSection() function in the tools/tiffcrop.c component of the LibTIFF library allows a hacker to induce a service failure.
The vulnerability of the extractImageSection function in the tools/tiffcrop.c component of the LibTIFF library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure using a specially crafted file...
The vulnerability of the Advantech WISE-PaaS/OTA Server lies in improper default access rights settings, which allow attackers to escalate their privileges.
The vulnerability of the Advantech WISE-PaaS/OTA Server is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to increase their privileges by using a specially created file...
Denial Of Service (DoS)
ImageMagick is vulnerable to Denial Of Service DoS. A malicious user is able to cause the application to crash, when executing a crafted file with the convert command...
The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious PDF file...
The vulnerability of the saveAs method in the PDF-XChange PDF document viewing and editing program allows a perpetrator to execute arbitrary code.
The vulnerability of the saveAs method in the PDF-XChange PDF viewing and editing software is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malicious file...
