CVE-2022-30786

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

CVE-2022-30784

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap exhaustion when processing a crafted NTFS image file or partition...

The vulnerability of the syntax analysis implementation for DWF format files in the Autodesk Design Review software lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the syntax analysis implementation for DWF format files in the Autodesk Design Review software lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, usi...

Vulnerability of the CrlPlatform.dll library in the CorelDRAW Standard graphic editor, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CrlPlatform.dll library, which is part of the CorelDRAW Standard graphic editor, relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially crafted CDR fi...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds read in libsndfile's FLAC codec functionality allowing an attacker to crash the system by submitting a specially crafted file via tricking a user to open or otherwise to an application linked with...

The vulnerability of the Vim text editor, related to the pointer shifting beyond the selected memory range, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to the pointer being moved beyond the selected memory range. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

PT-2022-6743 · Gnome +9 · Gimp +9

Name of the Vulnerable Software and Affected Versions: GNOME GIMP version 2.10.30 Description: The issue is related to the gimp layer invalidate boundary function, which allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS. This can be exploit...

The vulnerability of the Vim text editor’s append command allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vim text editor’s append command relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created file...

The vulnerability of the skip_range() function implementation in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the skiprange function in the Vim text editor is related to the use of an invalid pointer with the “V:” parameter in the Ex mode. Exploiting this vulnerability could allow a attacker to execute arbitrary code or cause a service failure using a specially created file...

CVE-2022-29788

libmobi before v0.10 contains a NULL pointer dereference via the component mobibuffergetpointer. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mobi file...

Regular expression denial of service in apache tika

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

The vulnerability of the skip_string() function implementation in the Vim text editor allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the skipstring function in the Vim text editor relates to the execution of operations beyond the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure or execute arbitrary code by loading a specially created file...

The vulnerability of the find_next_quote() function in the Vim text editor allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the findnextquote function in the Vim text editor is related to the execution of an operation outside the buffer’s memory limits. Exploiting this vulnerability could allow a attacker to trigger a service failure or execute arbitrary code using a specially created file...

The vulnerability in the implementation of the vim_strncpy find_word() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the vimstrncpy findword function in the Vim text editor is related to the execution of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure or execute arbitrary code by loading a specially...

CVE-2022-30973

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only...

The vulnerability of the CLI component of the Cisco SD-WAN vManage centralized network management system allows a attacker to execute arbitrary commands.

The vulnerability of the CLI component in the Cisco SD-WAN vManage centralized network management system is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using a specially created file...

ROS-20220530-01

A vulnerability in the Vim text editor is related to boundary conditions in the getonesourceline function. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a read error outside the boundary conditions, and...

CVE-2022-29632

An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file...

The vulnerability of the Corel PhotoPaint software lies in the ability to write beyond the buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of the Corel PhotoPaint photo-editing software relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created CPT file...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2022-1715)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...