libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits()

An improper input validation flaw was found in libtiff's tiffcrop utility. This issue can lead to an out-of-bounds read and cause a crash if an attacker can supply a crafted file to tiffcrop...

CVE-2022-4345

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...

PT-2023-6085 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0009 Tecnomatix Plant Simulation versions prior to V2302.0003 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end ...

The vulnerability of the Huawei ManageOne data center management system, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Huawei ManageOne data center management system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through specially created files...

Omron CX-Drive 资源管理错误漏洞

Omron CX-Drive is a CX drive software for inverters and servos from Omron Japan. A security vulnerability exists in Omron CX-Drive V3.00 and earlier versions, which stems from the fact that CX-Drive contains a post-release reuse, which can be exploited by an attacker to allow execution of arbitra...

The vulnerability of the Microsoft Office Graphics components in Microsoft Office programs and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Graphics packages and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2022-46347

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...

CVE-2022-41285

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

Siemens Parasolid 缓冲区错误漏洞

An out-of-bounds write vulnerability exists in Siemens Parasolid, a geometric modeling kernel from Siemens, Germany, due to an out-of-bounds write beyond the end of the allocation structure contained in a specially crafted XB file parsed by the affected application. The vulnerability allows an...

USN-5736-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14....

PT-2022-27421

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.13 and earlier Description The issue is related to a heap-based buffer overflow in the afp getappl function, which can be exploited via a crafted .appl file to achieve code execution. This provides remote root access on...

fribidi: Stack based buffer overflow

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service...

tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c

A flaw was found in LibTIFF where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchNormalTag in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service...

libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c

A buffer overflow vulnerability was found in libtiff. This flaw allows an attacker with network access to pass specially crafted files, causing an application to halt or crash. The root cause of this issue was from the memcpy function in tifunix.c...

libtiff: reachable assertion

A reachable assertion failure was found in libtiff's JBIG functionality. This flaw allows an attacker who can submit a crafted file to an application linked with libtiff and using the JBIG functionality, causes a crash via an assertion failure, leading to a denial of service. The exact mechanism...

PT-2022-5621

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Microsoft Office Excel 2019 x86 - version 2207, build 15427.20210...

PT-2022-5519 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from the American company Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A security vulnerability exists in Autodesk Design Review version...

CVE-2022-42934

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from the American company Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A security vulnerability exists in Autodesk Design Review version...