Apple TV 缓冲区错误漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...

Apple TV 缓冲区错误漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...

PT-2022-5602 · Vim +7 · Vim +7

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 8.2.4959 Description: The issue is related to a NULL pointer dereference error in the vim regexec string function of the Vim text editor. Exploitation of this issue may allow an attacker to impact the confidentiality,...

Incorrect Privilege Assignment in Jinja2

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with jinja2 in /tmp...

GHSA-PX5R-FQJ6-R2F8 Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

Open Chinese Convert subject to Denial of Service via Out-of-bounds Read

Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...

CVE-2022-28821

Adobe Framemaker versions 2029u8 and earlier and 2020u4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

Arbitrary Code Execution

XMP Toolkit is vulnerable to arbitrary code injection. The vulnerability exists due to a memory corruption when a victim opens a crafted file which allows an attacker to inject and execute malicious code...

Input validation

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...

Arbitrary Code Execution

exempi is vulnerable to arbitrary code execution. A buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

Arbitrary Code Execution

XMP Toolkit is vulnerable to arbitrary code injection. The vulnerability exists due to a memory corruption when a victim opens a crafted file which allows an attacker to inject and execute malicious code...

Denial Of Service (DoS)

exempi is vulnerable to denial of service DoS attacks. An integer overflow vulnerability potentially resulting in an application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

Improper Input Validation

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

Arbitrary Code Execution

exempi is vulnerable to arbitrary code execution. An Improper Input Validation vulnerability could potentially result in an arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service attacks. The vulnerability exists in the LZWDecode function the tiflzw.c which allows a malicious user to cause denial-of-service conditions via an out-of-bounds read through a crafted tiff file...

CVE-2022-28255

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28267

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28262

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28254

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28257

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...