12854 matches found
gzip: arbitrary-file-write vulnerability
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...
CVE-2022-27176
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions when using 'File Sanitization Option', and RevoWorks Desktop 2.1.84 and prior versions when using 'File...
PT-2022-3039 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may allow an...
PT-2022-3305 · Microsoft · Office Web Apps Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office Web Apps Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel and Microsoft Office Web Apps Server, which...
PT-2022-3303 · Microsoft · Sharepoint Server +3
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft Office Web Apps Server affected versions not specifi...
Microsoft Windows AV1 Video Extensions Multiple Vunerabilities (June 2022)
The Windows 'AV1 Video Extension' app installed on the remote host is affected by multiple remote code execution vulnerabilities. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...
PT-2022-2937 · Microsoft · Windows Autopilot +1
Name of the Vulnerable Software and Affected Versions: Windows Autopilot versions affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows Autopilot Device Management and Enrollment Client. This vulnerability is associated with errors in the...
PT-2022-3273 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office, which can be exploited to execute arbitrary code by loading a specially crafted file. Recommendations: At...
PT-2022-3041 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may allow an...
PT-2022-3304 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may allow an...
PT-2022-2989 · Adobe · Illustrator
Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier Description: The issue is related to a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...
The vulnerability of the ClamAV antivirus software, related to the repeated release of memory, allows a hacker to execute arbitrary code.
The vulnerability of the ClamAV antivirus software is related to repeated memory release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially created file...
The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted file...
Security Updates for Microsoft Word Products C2R (August 2019)
A Microsoft Word product is missing security updates. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...
The vulnerability of the pre-processing processor Simcenter Femap, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the pre-processing processor Simcenter Femap is related to writing beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by creating and opening a specially crafted .NEU file...
GHSA-67MX-JC2F-JGJM OS Command Injection in file editor in Gogs
Impact The malicious user is able to update a crafted config file into repository's .git directory in combination with crafted file deletion to gain SSH access to the server. All installations with repository upload enabled default are affected. Patches File deletions are prohibited to repository...
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
...
Adobe Acrobat and Reader Unspecified Vulnerability
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times...
CVE-2022-1796
A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use after free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not recommended t...