2546 matches found
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
LibTIFF 代码问题漏洞
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. LibTIFF suffers from a code issue vulnerability that stems from a null pointer dereference that allows an attacker to cause an...
PT-2023-9657 · Autodesk · Autodesk Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP, CATPART, or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Thi...
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation allows a perpetrator to execute arbitrary code.
The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created SPP file...
USN-6176-1 pypdf2 vulnerability
It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-33121
A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...
Fuji Electric FRENIC RHC Loader Out-of-Bounds Read Vulnerability
Fuji Electric FRENIC RHC Loader is a software tool developed by Fuji Electric Japan for debugging and monitoring inverters, mainly serving the industrial automation field. The Fuji Electric FRENIC RHC Loader suffers from an out-of-bounds read vulnerability, which can be exploited by an attacker t...
Multiple vulnerabilities in Fuji Electric products
Overview Multiple vulnerabilities listed below exist in the simulator module and the remote monitoring software 'V-Server Lite' and 'V-Server' contained in the graphic editor 'V-SFT', and the remote monitoring software 'TELLUS' and 'TELLUS Lite' provided by FUJI ELECTRIC CO., LTD. Stack-based...
PT-2023-9085 · Microsoft +1 · Visual Studio Code +1
Name of the Vulnerable Software and Affected Versions: GitKraken GitLens versions prior to 14.0.0 Description: The issue is related to insufficient input validation in the GitKraken GitLens plugin for Visual Studio Code, allowing an attacker to execute arbitrary code via a crafted file. This can ...
openssl: double free after calling PEM_read_bio_ex
A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...
PT-2023-3467 · Fatek Automation · Fvdesigner
Name of the Vulnerable Software and Affected Versions: Fatek Automation FvDesigner affected versions not specified Description: The issue is related to an out-of-bounds write in the parsing of FPJ files, which can be exploited by remote attackers to execute arbitrary code on affected installation...
PT-2023-3775 · Fatek Automation · Fvdesigner
Name of the Vulnerable Software and Affected Versions: Fatek Automation FvDesigner affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this...
The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code.
The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code or trigger malfunctions during maintenance operations.
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory when processing STP files. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause service interruptions by creating a...
CVE-2023-31874
Yank Note YN 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire'childprocess'...
SUSE CVE-2021-20245
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...
PT-2023-23369 · Teeworlds +1 · Teeworlds +1
Name of the Vulnerable Software and Affected Versions: Teeworlds version 0.7.5 Description: A memory leak in the component CConsole::Chain allows attackers to cause a Denial of Service DoS via opening a crafted file. This issue affects Teeworlds, potentially allowing for service disruption...