CVE-2021-25252

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

The vulnerability of the SetImageExtent() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the SetImageExtent function /MagickCore/image.c in the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to trigger a service failure by using a specially created file...

The vulnerability of the ImageMagick console-based graphics editor is related to integer overflow, allowing an attacker to trigger a service denial-of-service condition.

The vulnerability of the function in MagickCore/Quantum-export.c of the console image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by sending a specially created file...

The vulnerability of the IntensityCompare() function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.

The vulnerability of the IntensityCompare function /magick/quantize.c in the ImageMagick console-based graphics editor is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created file...

The vulnerability of the console-based graphic editor ImageMagick, related to memory release errors, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure using a specially created file...

CVE-2021-25830

A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...

Design/Logic Flaw

A file extension handling issue was found in core module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote...

Ascensio System ONLYOFFICE Document Server 安全漏洞

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...

ImageMagick De-Zero Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. A de-zero vulnerability exists in coders/jp2.c in versions prior to ImageMagick 7.0.10-62. An...

Synology DiskStation Manager 缓冲区错误漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A security vulnerability exists in faad in Synology DiskStation Manager...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer. Adobe Bridge handles files with an out-of-bounds write vulnerability that allows remote attackers to exploit the vulnerability by submitting a special file request and tricking the user into parsing it, which can cause the application to crash or arbitrary code can ...

PT-2021-11569 · Openscad · Openscad

Name of the Vulnerable Software and Affected Versions: Openscad version openscad-2020.12-RC2 Description: A stack-based buffer overflow vulnerability exists in the import stl.cc:import stl functionality. This vulnerability can be triggered by a specially crafted STL file, potentially leading to...

CVE-2021-27550

Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2021-1305)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or...

Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2021-1303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2021-20241

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2021-21054

Adobe Illustrator version 25.1 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

CVE-2021-21053

Adobe Illustrator version 25.1 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use...