The vulnerability of the xinclude.c component in the Libxml2 library arises from the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xinclude.c component in the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created fi...

The vulnerability of the XML object encoding function in the Libxml2 library, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of XML object encoding functions in the Libxml2 library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

Directory traversal

A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS. This vulnerability allows for an attacker to perform a directory traversal via a crafted .txt file...

The vulnerability of the MagickCore/resize.c component of the console-based image editing tool ImageMagick, which stems from the lack of checks for division by zero, allows a hacker to trigger a service failure.

The vulnerability of the MagickCore/resize.c component in the console-based image editing tool ImageMagick is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created file...

CVE-2020-23549

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branch Selection starting at FORMATS!GetPlugInInfo+0x00000000000047f6"...

CVE-2020-23546

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981...

CVE-2020-23549

CVE-2020-23549 affects IrfanView 4.54 on Windows, where processing of a crafted .cr2 file can cause a denial of service and potentially other unspecified impacts. The root cause is described as a faulting address influencing branch selection starting at FORMATS!GetPlugInInfo+0x47f6. The limited p...

PT-2021-6265 · Adobe · Premiere Elements

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Elements versions 20210809.daily.2242976 and earlier Description: The issue is related to a memory corruption vulnerability due to insecure handling of a malicious file. This could potentially result in arbitrary code execution...

Ubuntu 18.04 LTS / 20.04 LTS : GNU binutils vulnerabilities (USN-5124-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5124-1 advisory. It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash...

EulerOS 2.0 SP3 : OpenEXR (EulerOS-SA-2021-2600)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

CVE-2020-23043

Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file...

CVE-2020-23060

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file...

Stack overflow

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file...

Design/Logic Flaw

Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file...

CVE-2020-23043

Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file...

Internet Download Manager 缓冲区错误漏洞

Tonec Fze Internet Download Manager Idm is a tool to increase download speeds by up to 5 times, resume and schedule downloads from Tonec Fze, Inc. A security vulnerability exists in Internet Download Manager that can be exploited by an attacker to escalate local process privileges via a crafted e...

Tran Tu Air Sender代码问题漏洞

Tran Tu Air Sender is a file transfer application by the individual developer of Tran Tu. A security vulnerability exists in Tran Tu Air Sender version 1.0.2, which allows an attacker to execute arbitrary code from a crafted file...

PT-2021-10832 · Tonec · Internet Download Manager

Name of the Vulnerable Software and Affected Versions: Internet Download Manager version 6.37.11.1 Description: The issue is related to a stack buffer overflow in the Export/Import function, allowing attackers to escalate local process privileges via a crafted ef2 file. Recommendations: For...

The vulnerability in the dstring.c component of the cpio package in the Debian GNU/Linux operating system allows a hacker to execute arbitrary code through the created file.

The vulnerability of the dstring.c component in the cpio package of the Debian GNU/Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to trigger a stack overflow through the created file...

CVE-2021-3872

An out-of-bounds write flaw was found in vim's drawscreen.c winredrstatus function. This flaw allows an attacker to trick a user to open a crafted file with specific arguments in vim, triggering an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, a...