PT-2022-6343 · Microsoft · 365 Apps +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information using a specially...

GHSA-65HP-4VXR-C356 Arbitrary code execution in Magnolia CMS

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted CSV/XLS file...

CVE-2021-46364

A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file...

Magnolia CMS 代码问题漏洞

Magnolia CMS is an application of the Swiss company Magnolia. Magnolia CMS, a website building framework, is provided with a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted CSV XLS file...

Magnolia CMS 安全漏洞

Magnolia CMS is an application of the Swiss company Magnolia. provides a website building framework Magnolia CMS has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted CSV XLS file...

Rocky Linux 8 : aide (RLSA-2022:441)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:441 advisory. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based...

AlmaLinux 8 : exiv2 (ALSA-2020:1577)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:1577 advisory. exiv2: infinite loop and hang in Jp2Image::readMetadata in jp2image.cpp could lead to DoS CVE-2019-20421 exiv2: null pointer dereference in the...

Adobe Photoshop 22.x < 22.5.5 / 23.x < 23.1.1 Vulnerability (APSB22-08)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.5/23.1.1. It is, therefore, affected by a vulnerability as referenced in the apsb22-08 advisory. - Adobe Photoshop versions 22.5.4 and earlier and 23.1 and earlier are affected by a buffer overflow vulnerability...

PT-2022-6497 · Unknown +4 · Zoneminder +4

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.13 Description: The issue is related to incorrect restriction of a directory path with limited access in ZoneMinder, a video surveillance software. This can be exploited by a remote attacker to execute...

Adobe Photoshop 22.x < 22.5.5 / 23.x < 23.1.1 Vulnerability (macOS APSB22-08)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.5/23.1.1. It is, therefore, affected by a vulnerability as referenced in the apsb22-08 advisory. - Adobe Photoshop versions 22.5.4 and earlier and 23.1 and earlier are affected by a buffer overflow...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of the software platform for developing and managing online stores Magento Commerce lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the software platform for developing and managing online stores Magento Commerce is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the target system using a specially crafted PDF file...

The vulnerability of the Adobe InCopy text creation and editing software lies in the writing beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

The vulnerability of objects in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs allows a perpetrator to execute arbitrary code.

The vulnerability of objects in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious web...

DEBIAN-CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Information disclosure

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

CVE-2022-24262

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root...