CVE-2023-0101

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host...

[R1] Nessus Version 8.15.8 Fixes One Vulnerability

R1 Nessus Version 8.15.8 Fixes One Vulnerability Arnie Cabral Wed, 01/18/2023 - 12:13 A privilege escalation vulnerability was identified in Nessus versions 8.15.7 and earlier. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM...

Cisco Firepower Management Center Import Function Unauthorized Access

The vulnerability of the import function of the administrative interface module of Cisco Firepower Management Center FMC is related to insufficient validation of XML files’ syntax. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through ...

Microsoft Office 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Integer overflow

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...

snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

Adobe Dimension Memory Leak Unauthorized Access

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

Adobe InCopy Code Execution

The vulnerability of the Adobe InCopy text creation and editing software is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

Adobe Acrobat DC Buffer Overflow RCE

The vulnerability of the Adobe Acrobat DC PDF editing program relates to data writing beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

PDF Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to information through a specially...

Adobe InCopy Buffer Overflow Information Disclosure

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

3D Builder Code Execution

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the PackTmt::pack function in the ptmt.cpp file. The flow allows an attacker to cause an abort via a crafted file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub...

DEBIAN-CVE-2023-23456

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

Heap overflow

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

UBUNTU-CVE-2023-23456

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

CVE-2023-23456

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

libtiff: division by zero issues in tiffcrop

A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of service via a crafted tiff file...

Design/Logic Flaw

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...