GNU LibreDWG bits.c buffer overflow vulnerability

GNU LibreDWG is a C language library for working with DWG files. A buffer overflow vulnerability exists in GNU LibreDWG bits.c, which can be exploited by a remote attacker to submit a specially crafted malicious file that can be tricked into parsing to execute arbitrary code in the context of an...

The vulnerability of the xfs_agf_verify function in the XFS file system of Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the xfsagfverify function in the XFS file system of Linux operating systems is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause a service failure by synchronizing a specially created file with the metadata of the mounted XFS...

Cisco SD-WAN vManage Software Directory Traversal Vulnerability

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation o...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

PT-2020-3161 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: A remote code execution issue exists in Microsoft Outlook software due to its failure to properly handle objects in memory. This could allow an attacker to execute arbitrary code...

PSF-2020-2 Infinite loop in tarfile module while opening a crafted file

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks header validation...

The vulnerability of Microsoft Office packages, Microsoft Office for Mac, Microsoft 365 Apps for Enterprise, and Microsoft Excel relates to improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office for Mac, Microsoft 365 Apps for Enterprise, and Microsoft Excel are related to incorrect handling of objects in memory. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code using a specially created fil...

Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CNVD-2020-72695)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Microsoft Windows Codecs Library is one of the audio and video file codecs...

CVE-2020-6089

An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a buffer overflow resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the JET Database Engine database driver for Windows operating systems, related to object handling errors in memory, allows a hacker to execute arbitrary code.

The vulnerability of the JET Database Engine database driver for Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

File Upload Vulnerability in HulaCWMS v2.0.1 at Qingdao Scorch Culture Media Co.

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS v2.0.1 has a file upload vulnerability that can be exploited by attackers to construct specific file packages, upload malicious files, and gain...

The vulnerability of the Windows Jet Database Engine component of the operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows Jet Database Engine component of the operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows Jet Database Engine component of the operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

Medium: php-pecl-imagick

Issue Overview: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file. CVE-2017-18254 An issue was discovered in ImageMagick 7.0.7. The...

Online Student Enrollment System 1.0 - Unauthenticated Arbitrary File Upload

Exploit Title: Online Student Enrollment System 1.0 - Unauthenticated Arbitrary File Upload Google Dork: N/A Date: 2020-06-20 Exploit Author: BKpatron Vendor Homepage: https://www.campcodes.com/projects/php/4745/online-student-enrollment-system-in-php-mysqli/ Software Link:...

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...