12923 matches found
CVE-2015-1877
The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...
CVE-2015-1877
The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...
ALPINE-CVE-2021-3520
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability...
The vulnerability affects components of Microsoft Office Graphics packages, Microsoft Office programs, Microsoft 365 Apps for Enterprise, and Microsoft Word, allowing attackers to execute arbitrary code.
The vulnerability of components of the Microsoft Office Graphics package, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Word is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially...
The vulnerability of Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
CVE-2021-3516
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability...
Design/Logic Flaw
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability...
CVE-2021-3516
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability...
CVE-2021-3516
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability...
Accusoft ImageGear 缓冲区错误漏洞
Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIF bitspersample handling function in Accusoft ImageGear version 19.9. An attacker can exploit the vulnerability via a specially crafted file to cause...
The vulnerability of the DJVU::filter_bv() function in the DjVuLibre library and tools allows a hacker to execute arbitrary code on the target system using a specially created djvu file.
The vulnerability of the DJVU::filterbv function in the DjVuLibre library and utilities is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the target system using a specially created djvu file...
CVE-2020-36367
Stack overflow vulnerability in parseblock Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36373
Stack overflow vulnerability in parseshifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36375
Stack overflow vulnerability in parseequality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36375
Stack overflow vulnerability in parseequality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36368
Stack overflow vulnerability in parsestatement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36373
Stack overflow vulnerability in parseshifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...
CVE-2020-36366
Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...