CVE-2023-39184

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the curre...

CVE-2023-30795

A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4, Parasolid V34.0 All versions V34.0.253, Parasolid V34.1 All versions V34.1.243, Parasolid V35.0 All versions V35.0.177, Parasolid V35.1 All versions V35.1.073. The affected applications contain an...

The vulnerability of Omron CX-Programmer’s software for programming logic controllers lies in the use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted CXP files...

PT-2023-4599 · Yasm +3 · Yasm +3

Name of the Vulnerable Software and Affected Versions: Yasm version 1.3.0.78 Description: The issue is related to a NULL Pointer Dereference in the components /libyasm/intnum.c and /elf/elf.c of the Yasm assembler. This allows an attacker to cause a denial of service via a crafted file. The...

CVE-2023-34798

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...

UBUNTU-CVE-2023-3745

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

GHSA-V5FW-Q4PF-8P2H Duplicate Advisory: Open Babel has out-of-bounds write in Gaussian translationVectors[]

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jg3h-pv7c-4f9c. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

Panasonic Control FPWIN Pro 缓冲区错误漏洞

Panasonic Control FPWIN Pro is a programming software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Control FPWIN Pro 7.6.0.3 and prior versions, which stems from a memory corruption vulnerability that could allow execution of arbitrary code when opening specially...

The vulnerability of the ActiveX components of Microsoft Office programs allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the ActiveX components of Microsoft Office programs is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using the created file...

PT-2023-9360

Name of the Vulnerable Software and Affected Versions stb vorbis affected versions not specified Description The issue is related to a potential integer overflow in sizeofchar f-comment list length which may cause setup malloc to allocate less memory than required. This can lead to a memory write...

PT-2023-26140 · Libjpeg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: libjpeg affected versions not specified Description: A heap buffer overflow was discovered in libjpeg, specifically in the LineBitmapRequester::EncodeRegion function at linebitmaprequester.cpp. This issue allows attackers to cause a Denial of...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is released. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to writing beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to writing beyond the buffer in memory. Exploiting these...

Microsoft Paint 3D Code Execution (July 2023)

The Windows 'Paint 3D' app installed on the remote host is affected by multiple code execution vulnerabilities. An attacker who successfully exploited one of the vulnerabilities could execute arbitrary code. Exploitation of the vulnerabilities requires that a program process a specially crafted...

ROS-2-2144

2.2144 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-2124

2.2124 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

SUSE CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...