Lucene search
+L

14531 matches found

Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•11 views

PT-2022-5494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows GDI+ interface, which can allow an attacker to gain unauthorized access to protected information using a...

5.5CVSS6.1AI score0.00777EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2022/11/07 12:00 a.m.•16 views

CVE-2022-43359

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...

7.5AI score0.00364EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2022/11/04 12:00 a.m.•48 views

Amazon Linux 2022 : xz, xz-devel, xz-libs (ALAS2022-2022-187)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-187 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's...

8.8CVSS6.8AI score0.05549EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/11/03 4:42 a.m.•38 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in upx PackLinuxElf::canUnpack in plxelf.cpp which allows attackers to execute arbitrary code and cause a denial of service via a crafted file...

7.8CVSS7.6AI score0.0123EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2022/11/03 4:41 a.m.•43 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to an assertion abort in upx MemBuffer::alloc in mem.cpp which allows attackers to cause a denial of service abort via a crafted file...

5.5CVSS5.3AI score0.01041EPSS
SaveExploits1References5Affected Software2
NVD
NVD
•added 2022/11/02 2:15 p.m.•21 views

CVE-2022-43235

Libde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ffhevcputhevcepelpixels8sse in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

6.5CVSS0.01116EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2022/11/02 12:00 a.m.•43 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2689)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

5.5CVSS6.6AI score0.00323EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/11/02 12:00 a.m.•37 views

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2657)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

5.5CVSS6.6AI score0.00323EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/11/01 12:00 a.m.•22 views

Vehicle Booking System code-related vulnerabilities

Vehicle Booking System is a vehicle booking system. A file upload vulnerability exists in Vehicle Booking System v1.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted php file...

7.2CVSS7.8AI score0.0139EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•18 views

Adobe Illustrator Code Execution

The vulnerability of Adobe Illustrator exists due to insufficient verification of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00379EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•22 views

Adobe Photoshop Use-After-Free

The vulnerability of the Adobe Photoshop graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

8.1CVSS7.6AI score0.00573EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•26 views

Adobe InCopy Buffer Overflow Info Disclosure

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS6.3AI score0.00371EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•18 views

Adobe Bridge Memory Use After Free

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS6.4AI score0.00407EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•20 views

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00415EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•22 views

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00513EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•23 views

Adobe Animate Buffer Overflow

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created fi...

7.8CVSS7.8AI score0.00472EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•22 views

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00513EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•21 views

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00415EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•24 views

Adobe Photoshop Heap Buffer Overflow Code Execution

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.00512EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•23 views

Adobe Photoshop Buffer Overflow Code Execution

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.00512EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder